{"id":"CVE-2026-89481","aliases":["ALSA-2026:71602","ALSA-2026:75746","ALSA-2026:75747","AZL-100646","BELL-CVE-2026-89481","CLSA-2026-1791132991","CLSA-2026-1791780738","CLSA-2026-1792749577","CLSA-2026-1792979985","DEBIAN-CVE-2026-89481","EUVD-2026-76387","GHSA-fmg2-x8fr-fw62","OESA-2026-4357","RHSA-2026:71602","RHSA-2026:75746","RHSA-2026:75747","RHSA-2026:76739","RLSA-2026:71602","RLSA-2026:75746","RLSA-2026:75747","SUSE-SU-2026:24179-1","SUSE-SU-2026:24181-1","SUSE-SU-2026:24182-1","SUSE-SU-2026:24184-1","SUSE-SU-2026:24197-1","SUSE-SU-2026:24235-1","SUSE-SU-2026:24315-1","SUSE-SU-2026:24316-1","SUSE-SU-2026:4640-1","SUSE-SU-2026:4687-1","SUSE-SU-2026:4706-1","UBUNTU-CVE-2026-89481","USN-8959-1","USN-8960-1","USN-9002-1","openSUSE-SU-2026:11880-1","openSUSE-SU-2026:22091-1"],"status":"published","title":"nvme-tcp: fix host memory disclosure on R2T for a read command","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00432,"percentile":0.37792,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-09-11T19:43:36Z","modified":"2026-11-06T20:16:33Z","fixes":[{"ecosystem":"Azure Linux:3","package":"kernel","fixed_in":["6.6.157.1-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"linux-lts","fixed_in":["6.1.189-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"linux-lts","fixed_in":["6.12.111-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.18.53-r0"],"sources":["osv"]},{"ecosystem":"Linux","package":"Kernel","fixed_in":["5.10.273","5.15.224","6.1.188","6.6.157","6.12.109","6.18.50","7.2.4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"linux","fixed_in":["6.1.190-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.12.111-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["7.2.6-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"linux-6.12","fixed_in":["6.12.111-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","fixed_in":["7.0.0-42.42~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","fixed_in":["6.8.0-1038.42"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-7.0","fixed_in":["7.0.0-42.42.1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux","fixed_in":["7.0.0-42.42"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","fixed_in":["7.0.0-1016.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","fixed_in":["7.0.0-1016.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","fixed_in":["7.0.0-1017.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","fixed_in":["7.0.0-1017.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","fixed_in":["7.0.0-1015.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"linux-riscv","fixed_in":["7.0.0-42.42.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-modules-extra-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-uki-virt-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Azure Linux:3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.157.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.182-r0"},{"fixed":"6.1.189-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.103-r0"},{"fixed":"6.12.111-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.46-r0"},{"fixed":"6.18.53-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-buildinfo-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-buildinfo-5.4.0-239-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-cloud-tools-5.4.0-239","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-cloud-tools-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-cloud-tools-5.4.0-239-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-cloud-tools-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-headers-5.4.0-239","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-headers-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-headers-5.4.0-239-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-image-unsigned-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-image-unsigned-5.4.0-239-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-libc-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-modules-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-modules-5.4.0-239-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-modules-extra-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-source-5.4.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-tools-5.4.0-239","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-tools-5.4.0-239-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-tools-5.4.0-239-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-tools-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"linux-tools-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-239.259+tuxcare.els1"}]}],"bundled":396},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els31"}]}],"bundled":72},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els50"}]}],"bundled":97},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els51"}]}],"bundled":155},{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.10.273"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.224"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.188"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.157"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.109"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.50"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.190-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.123-1","6.1.124-1","6.1.128-1","6.1.129-1","6.1.133-1","6.1.135-1","6.1.137-1","6.1.139-1","6.1.140-1","6.1.147-1","6.1.148-1","6.1.153-1","6.1.158-1","6.1.159-1","6.1.162-1","6.1.164-1","6.1.170-1","6.1.170-2","6.1.170-3","6.1.172-1","6.1.174-1","6.1.176-1","6.1.177-1","6.1.180-1","6.1.187-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.111-1"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1"]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.6-1"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.111-1","6.12.113-1","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.10-1","6.16.11-1","6.16.12-1","6.16.12-1~bpo13+1","6.16.12-2","6.16.3-1","6.16.3-1~bpo13+1","6.16.5-1","6.16.6-1","6.16.7-1","6.16.8-1","6.16.9-1","6.16~rc7-1~exp1","6.17.10-1","6.17.11-1","6.17.12-1","6.17.13-1","6.17.13-1~bpo13+1","6.17.2-1~exp1","6.17.5-1~exp1","6.17.6-1","6.17.7-1","6.17.7-2","6.17.8-1","6.17.8-1~bpo13+1","6.17.9-1","6.18.1-1~exp1","6.18.10-1","6.18.12-1","6.18.12-1~bpo13+1","6.18.13-1","6.18.14-1","6.18.15-1","6.18.15-1~bpo13+1","6.18.2-1~exp1","6.18.3-1","6.18.5-1","6.18.5-1~bpo13+1","6.18.8-1","6.18.9-1","6.18.9-1~bpo13+1","6.18~rc4-1~exp1","6.18~rc4-1~exp2","6.18~rc5-1~exp1","6.18~rc6-1~exp1","6.18~rc7-1~exp1","6.19-1~exp1","6.19.10-1","6.19.10-1~bpo13+1","6.19.11-1","6.19.11-1~bpo13+1","6.19.12-1","6.19.13-1","6.19.13-1~bpo13+1","6.19.14-1","6.19.14-1~bpo13+1","6.19.2-1~exp1","6.19.3-1~exp1","6.19.4-1~exp1","6.19.5-1~exp1","6.19.6-1","6.19.6-2","6.19.6-2~bpo13+1","6.19.8-1","6.19.8-1~bpo13+1","6.19~rc4-1~exp1","6.19~rc5-1~exp1","6.19~rc6-1~exp1","6.19~rc7-1~exp1","6.19~rc8-1~exp1","7.0-1~exp1","7.0.1-1~exp1","7.0.10-1","7.0.10-1~bpo13+1","7.0.12-1","7.0.12-2","7.0.12-2~bpo13+1","7.0.13-1","7.0.13-1~bpo13+1","7.0.14-1","7.0.3-1","7.0.4-1","7.0.4-1~bpo13+1","7.0.7-1","7.0.7-1~bpo13+1","7.0.9-1","7.0.9-1~bpo13+1","7.1.1-1~exp1","7.1.10-1","7.1.12-1","7.1.13-1","7.1.13-1~bpo13+1","7.1.2-1~exp1","7.1.3-1","7.1.3-1+sunvdc","7.1.3-1~bpo13+1","7.1.4-1","7.1.5-1","7.1.6-1","7.1.7-1","7.1.7-1~bpo13+1","7.1.8-1","7.1.8-1~bpo13+1","7.1.8-2","7.1.9-1","7.1.9-1+sparc64","7.1~rc2-1~exp1","7.1~rc3-1~exp1","7.1~rc4-1~exp1","7.1~rc4-1~exp2","7.1~rc5-1~exp1","7.1~rc7-1~exp1","7.2.2-1~exp1","7.2.3-1~exp1","7.2.6-1~bpo13+1","7.2~rc3-1~exp1","7.2~rc5-1~exp1","7.2~rc7-1~exp1"]},{"source":"osv","ecosystem":"Debian:12","package":"linux-6.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.111-1~deb12u1"}]}],"versions":["6.12.100-1~deb12u1","6.12.101-1~deb12u1","6.12.107-1~deb12u1"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-337.0.0.238.oe2203sp4"}]}],"bundled":67},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-modules-extra-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-uki-virt-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"kernel-rt-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-rt-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-rt-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-rt-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-rt-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-uki-virt-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-rt-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-rt-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libperf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-687.55.1.el9_8"}]}],"bundled":38},{"source":"osv","ecosystem":"Rocky Linux:10","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.12.0-211.60.1.el10_2"}]}],"bundled":22},{"source":"osv","ecosystem":"Rocky Linux:8","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.rt7.512.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.171.1.el8_10"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro Extras 6.2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1.159998.21.38"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.6.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.26"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.26"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.26"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1.159998.21.38"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":473},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-159998.53.1"}]}],"bundled":479},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7-RT_Update_21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.1.3.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.78.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.78.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP7","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.7.78.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP5","package":"kgraft-patch-SLE12-SP5_Update_88","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-8.3.3"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-122.333.2"}]}],"bundled":229},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1.150700.17.47.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP7","package":"kernel-livepatch-SLE15-SP7_Update_22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150700.15.3.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150700.53.84.1"}]}],"bundled":508},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-aws-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1018.18~18.04.1","5.4.0-1020.20~18.04.2","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.30~18.04.1","5.4.0-1030.31~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1038.40~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1045.47~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1058.61~18.04.3","5.4.0-1059.62~18.04.1","5.4.0-1060.63~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1081.88~18.04.1","5.4.0-1083.90~18.04.1","5.4.0-1084.91~18.04.1","5.4.0-1085.92~18.04.1","5.4.0-1086.93~18.04.1","5.4.0-1088.96~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1090.98~18.04.1","5.4.0-1092.100~18.04.2","5.4.0-1093.102~18.04.2","5.4.0-1094.102~18.04.1","5.4.0-1096.104~18.04.1","5.4.0-1097.105~18.04.1","5.4.0-1099.107~18.04.1","5.4.0-1100.108~18.04.1","5.4.0-1101.109~18.04.1","5.4.0-1103.111~18.04.1","5.4.0-1104.112~18.04.1","5.4.0-1105.113~18.04.1","5.4.0-1106.114~18.04.1","5.4.0-1107.115~18.04.1","5.4.0-1108.116~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.2","5.4.0-1113.123~18.04.1","5.4.0-1114.124~18.04.1","5.4.0-1116.126~18.04.1","5.4.0-1117.127~18.04.1","5.4.0-1118.128~18.04.1","5.4.0-1119.129~18.04.1","5.4.0-1120.130~18.04.1","5.4.0-1121.131~18.04.1","5.4.0-1122.132~18.04.1","5.4.0-1123.133~18.04.1","5.4.0-1124.134~18.04.1","5.4.0-1125.135~18.04.1","5.4.0-1126.136~18.04.1","5.4.0-1127.137~18.04.2","5.4.0-1128.138~18.04.1","5.4.0-1129.139~18.04.1","5.4.0-1130.140~18.04.1","5.4.0-1131.141~18.04.1","5.4.0-1132.142~18.04.1","5.4.0-1133.143~18.04.1","5.4.0-1134.144~18.04.1","5.4.0-1135.145~18.04.1","5.4.0-1136.146~18.04.1","5.4.0-1137.147~18.04.1","5.4.0-1139.149~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1147.157~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1153.163~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1156.166~18.04.1","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1160.170~18.04.1","5.4.0-1161.172~18.04.1","5.4.0-1162.173~18.04.1","5.4.0-1163.174~18.04.1","5.4.0-1165.176~18.04.1","5.4.0-1167.178~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-azure-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.20~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1023.23~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1026.26~18.04.1","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1035.36~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1041.43~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1047.49~18.04.1","5.4.0-1048.50~18.04.1","5.4.0-1049.51~18.04.1","5.4.0-1051.53~18.04.1","5.4.0-1055.57~18.04.1","5.4.0-1056.58~18.04.1","5.4.0-1058.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1064.67~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1069.72~18.04.1","5.4.0-1070.73~18.04.1","5.4.0-1072.75~18.04.1","5.4.0-1073.76~18.04.1","5.4.0-1074.77~18.04.1","5.4.0-1077.80~18.04.1","5.4.0-1078.81~18.04.1","5.4.0-1080.83~18.04.2","5.4.0-1083.87~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1089.94~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1091.96~18.04.1","5.4.0-1094.100~18.04.1","5.4.0-1095.101~18.04.1","5.4.0-1098.104~18.04.2","5.4.0-1100.106~18.04.1","5.4.0-1101.107~18.04.1","5.4.0-1103.109~18.04.1","5.4.0-1104.110~18.04.1","5.4.0-1105.111~18.04.1","5.4.0-1106.112~18.04.1","5.4.0-1107.113~18.04.1","5.4.0-1108.114~18.04.1","5.4.0-1109.115~18.04.1","5.4.0-1110.116~18.04.1","5.4.0-1111.117~18.04.1","5.4.0-1112.118~18.04.1","5.4.0-1113.119~18.04.1","5.4.0-1115.122~18.04.1","5.4.0-1116.123~18.04.1","5.4.0-1117.124~18.04.1","5.4.0-1118.125~18.04.1","5.4.0-1119.126~18.04.2","5.4.0-1120.127~18.04.1","5.4.0-1121.128~18.04.1","5.4.0-1122.129~18.04.1","5.4.0-1123.130~18.04.1","5.4.0-1124.131~18.04.1","5.4.0-1126.133~18.04.1","5.4.0-1127.134~18.04.1","5.4.0-1128.135~18.04.1","5.4.0-1129.136~18.04.1","5.4.0-1130.137~18.04.1","5.4.0-1131.138~18.04.1","5.4.0-1132.139~18.04.1","5.4.0-1133.140~18.04.1","5.4.0-1134.141~18.04.1","5.4.0-1135.142~18.04.1","5.4.0-1136.143~18.04.1","5.4.0-1137.144~18.04.1","5.4.0-1138.145~18.04.1","5.4.0-1139.146~18.04.1","5.4.0-1140.147~18.04.1","5.4.0-1142.149~18.04.1","5.4.0-1143.150~18.04.1","5.4.0-1145.152~18.04.1","5.4.0-1147.154~18.04.1","5.4.0-1148.155~18.04.1","5.4.0-1149.156~18.04.1","5.4.0-1150.157~18.04.1","5.4.0-1151.158~18.04.1","5.4.0-1152.159~18.04.1","5.4.0-1153.160~18.04.1","5.4.0-1154.161~18.04.1","5.4.0-1156.163~18.04.1","5.4.0-1157.164~18.04.1","5.4.0-1161.167~18.04.1","5.4.0-1162.168~18.04.1","5.4.0-1163.169~18.04.1","5.4.0-1164.170~18.04.1","5.4.0-1166.172~18.04.1","5.4.0-1167.173~18.04.1","5.4.0-1168.174~18.04.1","5.4.0-1169.175~18.04.1","5.4.0-1170.176~18.04.1","5.4.0-1171.177~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-gcp-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.2","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1040.43~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.2","5.4.0-1046.49~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1051.55~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1060.64~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1065.69~18.04.1","5.4.0-1067.71~18.04.1","5.4.0-1068.72~18.04.1","5.4.0-1069.73~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.87~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.94~18.04.1","5.4.0-1087.95~18.04.1","5.4.0-1089.97~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1096.105~18.04.2","5.4.0-1097.106~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.2","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.1","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1128.137~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1139.148~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.150~18.04.1","5.4.0-1142.151~18.04.1","5.4.0-1143.152~18.04.1","5.4.0-1145.154~18.04.1","5.4.0-1147.156~18.04.1","5.4.0-1148.157~18.04.1","5.4.0-1149.158~18.04.1","5.4.0-1150.159~18.04.1","5.4.0-1151.160~18.04.1","5.4.0-1152.161~18.04.1","5.4.0-1153.162~18.04.1","5.4.0-1154.163~18.04.1","5.4.0-1155.164~18.04.1","5.4.0-1156.165~18.04.1","5.4.0-1157.166~18.04.1","5.4.0-1159.168~18.04.1","5.4.0-1160.169~18.04.1","5.4.0-1161.170~18.04.1","5.4.0-1162.171~18.04.1","5.4.0-1163.172~18.04.1","5.4.0-1164.173~18.04.1","5.4.0-1165.174~18.04.1","5.4.0-1166.175~18.04.1","5.4.0-1167.176~18.04.1","5.4.0-1168.178~18.04.1","5.4.0-1169.179~18.04.1","5.4.0-1170.180~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-hwe-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-37.41~18.04.1","5.4.0-39.43~18.04.1","5.4.0-40.44~18.04.1","5.4.0-42.46~18.04.1","5.4.0-45.49~18.04.2","5.4.0-47.51~18.04.1","5.4.0-48.52~18.04.1","5.4.0-51.56~18.04.1","5.4.0-52.57~18.04.1","5.4.0-53.59~18.04.1","5.4.0-54.60~18.04.1","5.4.0-56.62~18.04.1","5.4.0-58.64~18.04.1","5.4.0-59.65~18.04.1","5.4.0-60.67~18.04.1","5.4.0-62.70~18.04.1","5.4.0-64.72~18.04.1","5.4.0-65.73~18.04.1","5.4.0-66.74~18.04.2","5.4.0-67.75~18.04.1","5.4.0-70.78~18.04.1","5.4.0-71.79~18.04.1","5.4.0-72.80~18.04.1","5.4.0-73.82~18.04.1","5.4.0-74.83~18.04.1","5.4.0-77.86~18.04.1","5.4.0-80.90~18.04.1","5.4.0-81.91~18.04.1","5.4.0-84.94~18.04.1","5.4.0-86.97~18.04.1","5.4.0-87.98~18.04.1","5.4.0-89.100~18.04.1","5.4.0-90.101~18.04.1","5.4.0-91.102~18.04.1","5.4.0-92.103~18.04.2","5.4.0-94.106~18.04.1","5.4.0-96.109~18.04.1","5.4.0-97.110~18.04.1","5.4.0-99.112~18.04.1","5.4.0-100.113~18.04.1","5.4.0-104.118~18.04.1","5.4.0-105.119~18.04.1","5.4.0-107.121~18.04.1","5.4.0-109.123~18.04.1","5.4.0-110.124~18.04.1","5.4.0-113.127~18.04.1","5.4.0-117.132~18.04.1","5.4.0-120.136~18.04.1","5.4.0-121.137~18.04.1","5.4.0-122.138~18.04.1","5.4.0-124.140~18.04.1","5.4.0-125.141~18.04.1","5.4.0-126.142~18.04.1","5.4.0-128.144~18.04.1","5.4.0-131.147~18.04.1","5.4.0-132.148~18.04.1","5.4.0-133.149~18.04.1","5.4.0-135.152~18.04.2","5.4.0-136.153~18.04.1","5.4.0-137.154~18.04.1","5.4.0-139.156~18.04.1","5.4.0-144.161~18.04.1","5.4.0-146.163~18.04.1","5.4.0-147.164~18.04.1","5.4.0-148.165~18.04.1","5.4.0-149.166~18.04.1","5.4.0-150.167~18.04.1","5.4.0-152.169~18.04.1","5.4.0-153.170~18.04.1","5.4.0-155.172~18.04.1","5.4.0-156.173~18.04.1","5.4.0-159.176~18.04.1","5.4.0-162.179~18.04.1","5.4.0-163.180~18.04.1","5.4.0-164.181~18.04.1","5.4.0-165.182~18.04.1","5.4.0-166.183~18.04.2","5.4.0-167.184~18.04.1","5.4.0-169.187~18.04.1","5.4.0-170.188~18.04.1","5.4.0-171.189~18.04.1","5.4.0-172.190~18.04.1","5.4.0-173.191~18.04.1","5.4.0-174.193~18.04.1","5.4.0-175.195~18.04.1","5.4.0-177.197~18.04.1","5.4.0-181.201~18.04.1","5.4.0-182.202~18.04.1","5.4.0-186.206~18.04.1","5.4.0-187.207~18.04.1","5.4.0-189.209~18.04.1","5.4.0-190.210~18.04.1","5.4.0-192.212~18.04.1","5.4.0-193.213~18.04.1","5.4.0-195.215~18.04.1","5.4.0-196.216~18.04.1","5.4.0-198.218~18.04.1","5.4.0-200.220~18.04.1","5.4.0-202.222~18.04.1","5.4.0-204.224~18.04.1","5.4.0-205.225~18.04.1","5.4.0-208.228~18.04.1","5.4.0-211.231~18.04.1","5.4.0-212.232~18.04.1","5.4.0-214.234~18.04.1","5.4.0-215.235~18.04.1","5.4.0-216.236~18.04.1","5.4.0-218.238~18.04.1","5.4.0-219.239~18.04.1","5.4.0-220.240~18.04.1","5.4.0-221.241~18.04.1","5.4.0-222.242~18.04.1","5.4.0-223.243~18.04.1","5.4.0-224.244~18.04.1","5.4.0-225.245~18.04.1","5.4.0-227.247~18.04.1","5.4.0-228.248~18.04.1","5.4.0-229.249~18.04.1","5.4.0-231.251~18.04.1","5.4.0-233.253~18.04.1","5.4.0-234.254~18.04.1","5.4.0-238.258~18.04.1","5.4.0-241.261~18.04.1","5.4.0-242.262~18.04.1","5.4.0-244.264~18.04.1","5.4.0-245.265~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-ibm-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1010.11~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1017.19~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1020.22~18.04.1","5.4.0-1021.23~18.04.1","5.4.0-1023.25~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.32~18.04.1","5.4.0-1029.33~18.04.1","5.4.0-1031.35~18.04.1","5.4.0-1032.36~18.04.1","5.4.0-1033.37~18.04.1","5.4.0-1034.38~18.04.1","5.4.0-1036.41~18.04.1","5.4.0-1037.42~18.04.1","5.4.0-1040.45~18.04.2","5.4.0-1041.46~18.04.1","5.4.0-1042.47~18.04.1","5.4.0-1044.49~18.04.1","5.4.0-1045.50~18.04.1","5.4.0-1046.51~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1049.54~18.04.1","5.4.0-1050.55~18.04.1","5.4.0-1051.56~18.04.1","5.4.0-1052.57~18.04.1","5.4.0-1053.58~18.04.1","5.4.0-1054.59~18.04.1","5.4.0-1056.61~18.04.1","5.4.0-1057.62~18.04.1","5.4.0-1058.63~18.04.1","5.4.0-1059.64~18.04.1","5.4.0-1060.65~18.04.1","5.4.0-1061.66~18.04.1","5.4.0-1063.68~18.04.1","5.4.0-1064.69~18.04.1","5.4.0-1065.70~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1068.73~18.04.1","5.4.0-1069.74~18.04.1","5.4.0-1070.75~18.04.1","5.4.0-1071.76~18.04.1","5.4.0-1072.77~18.04.1","5.4.0-1073.78~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1075.80~18.04.1","5.4.0-1076.81~18.04.1","5.4.0-1077.82~18.04.1","5.4.0-1078.83~18.04.1","5.4.0-1079.84~18.04.1","5.4.0-1080.85~18.04.1","5.4.0-1081.86~18.04.1","5.4.0-1082.87~18.04.1","5.4.0-1083.88~18.04.1","5.4.0-1084.89~18.04.1","5.4.0-1085.90~18.04.1","5.4.0-1086.91~18.04.1","5.4.0-1090.95~18.04.1","5.4.0-1092.97~18.04.1","5.4.0-1093.98~18.04.1","5.4.0-1094.99~18.04.1","5.4.0-1095.100~18.04.1","5.4.0-1096.101~18.04.1","5.4.0-1097.102~18.04.1","5.4.0-1098.103~18.04.1","5.4.0-1099.104~18.04.1","5.4.0-1100.105~18.04.1","5.4.0-1102.107~18.04.1","5.4.0-1103.108~18.04.1","5.4.0-1104.109~18.04.1","5.4.0-1105.110~18.04.1","5.4.0-1107.112~18.04.1","5.4.0-1108.113~18.04.1","5.4.0-1109.114~18.04.1","5.4.0-1111.116~18.04.1","5.4.0-1112.117~18.04.1","5.4.0-1113.118~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-oracle-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1019.19~18.04.1","5.4.0-1021.21~18.04.1","5.4.0-1022.22~18.04.1","5.4.0-1024.24~18.04.1","5.4.0-1025.25~18.04.1","5.4.0-1028.29~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1033.35","5.4.0-1034.36~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1037.40~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1039.42~18.04.1","5.4.0-1041.44~18.04.1","5.4.0-1042.45~18.04.1","5.4.0-1043.46~18.04.1","5.4.0-1044.47~18.04.1","5.4.0-1046.50~18.04.2","5.4.0-1048.52~18.04.1","5.4.0-1049.53~18.04.1","5.4.0-1052.56~18.04.1","5.4.0-1053.57~18.04.1","5.4.0-1054.58~18.04.1","5.4.0-1055.59~18.04.1","5.4.0-1056.60~18.04.1","5.4.0-1057.61~18.04.1","5.4.0-1058.62~18.04.1","5.4.0-1059.63~18.04.1","5.4.0-1061.65~18.04.1","5.4.0-1062.66~18.04.1","5.4.0-1063.67~18.04.1","5.4.0-1064.68~18.04.1","5.4.0-1066.71~18.04.1","5.4.0-1067.72~18.04.1","5.4.0-1069.75~18.04.1","5.4.0-1070.76~18.04.1","5.4.0-1071.77~18.04.1","5.4.0-1073.79~18.04.1","5.4.0-1076.83~18.04.1","5.4.0-1078.86~18.04.1","5.4.0-1079.87~18.04.1","5.4.0-1081.89~18.04.1","5.4.0-1082.90~18.04.1","5.4.0-1083.91~18.04.1","5.4.0-1084.92~18.04.1","5.4.0-1086.95~18.04.1","5.4.0-1087.96~18.04.1","5.4.0-1090.99~18.04.2","5.4.0-1091.100~18.04.1","5.4.0-1092.101~18.04.1","5.4.0-1093.102~18.04.1","5.4.0-1094.103~18.04.1","5.4.0-1098.107~18.04.1","5.4.0-1099.108~18.04.1","5.4.0-1100.109~18.04.1","5.4.0-1101.110~18.04.1","5.4.0-1102.111~18.04.1","5.4.0-1103.112~18.04.1","5.4.0-1104.113~18.04.1","5.4.0-1105.114~18.04.1","5.4.0-1106.115~18.04.1","5.4.0-1107.116~18.04.1","5.4.0-1108.117~18.04.1","5.4.0-1109.118~18.04.1","5.4.0-1110.119~18.04.1","5.4.0-1111.120~18.04.1","5.4.0-1112.121~18.04.4","5.4.0-1113.122~18.04.1","5.4.0-1115.124~18.04.1","5.4.0-1116.125~18.04.1","5.4.0-1117.126~18.04.1","5.4.0-1118.127~18.04.1","5.4.0-1119.128~18.04.1","5.4.0-1120.129~18.04.1","5.4.0-1121.130~18.04.1","5.4.0-1122.131~18.04.1","5.4.0-1123.132~18.04.1","5.4.0-1124.133~18.04.1","5.4.0-1125.134~18.04.1","5.4.0-1126.135~18.04.1","5.4.0-1127.136~18.04.1","5.4.0-1129.138~18.04.1","5.4.0-1130.139~18.04.1","5.4.0-1131.140~18.04.1","5.4.0-1132.141~18.04.1","5.4.0-1133.142~18.04.1","5.4.0-1134.143~18.04.1","5.4.0-1135.144~18.04.1","5.4.0-1136.145~18.04.1","5.4.0-1137.146~18.04.1","5.4.0-1138.147~18.04.1","5.4.0-1140.149~18.04.1","5.4.0-1141.151~18.04.1","5.4.0-1142.152~18.04.1","5.4.0-1143.153~18.04.1","5.4.0-1144.154~18.04.1","5.4.0-1145.155~18.04.1","5.4.0-1146.156~18.04.1","5.4.0-1148.158~18.04.1","5.4.0-1149.159~18.04.1","5.4.0-1150.160~18.04.1","5.4.0-1151.161~18.04.1","5.4.0-1152.162~18.04.1","5.4.0-1154.164~18.04.1","5.4.0-1155.165~18.04.1","5.4.0-1156.166~18.04.2","5.4.0-1157.167~18.04.1","5.4.0-1158.168~18.04.1","5.4.0-1159.169~18.04.1","5.4.0-1161.171~18.04.1","5.4.0-1162.172~18.04.1","5.4.0-1163.173~18.04.1","5.4.0-1164.174~18.04.1","5.4.0-1165.175~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-raspi-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1013.13~18.04.1","5.4.0-1015.15~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1021.24~18.04.1","5.4.0-1022.25~18.04.1","5.4.0-1023.26~18.04.1","5.4.0-1025.28~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.31~18.04.1","5.4.0-1029.32~18.04.1","5.4.0-1030.33~18.04.1","5.4.0-1032.35~18.04.1","5.4.0-1033.36~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1041.45~18.04.1","5.4.0-1042.46~18.04.3","5.4.0-1043.47~18.04.1","5.4.0-1044.48~18.04.1","5.4.0-1045.49~18.04.1","5.4.0-1046.50~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1050.56~18.04.1","5.4.0-1052.58~18.04.1","5.4.0-1053.60~18.04.1","5.4.0-1055.62~18.04.1","5.4.0-1056.63~18.04.1","5.4.0-1058.65~18.04.1","5.4.0-1059.66~18.04.1","5.4.0-1060.68~18.04.1","5.4.0-1062.70~18.04.1","5.4.0-1065.75~18.04.1","5.4.0-1066.76~18.04.1","5.4.0-1068.78~18.04.1","5.4.0-1069.79~18.04.1","5.4.0-1070.80~18.04.1","5.4.0-1071.81~18.04.1","5.4.0-1073.84~18.04.1","5.4.0-1074.85~18.04.1","5.4.0-1077.88~18.04.2","5.4.0-1078.89~18.04.1","5.4.0-1079.90~18.04.1","5.4.0-1080.91~18.04.1","5.4.0-1081.92~18.04.1","5.4.0-1082.93~18.04.1","5.4.0-1083.94~18.04.1","5.4.0-1084.95~18.04.1","5.4.0-1085.96~18.04.1","5.4.0-1086.97~18.04.1","5.4.0-1088.99~18.04.1","5.4.0-1089.100~18.04.1","5.4.0-1090.101~18.04.1","5.4.0-1091.102~18.04.1","5.4.0-1092.103~18.04.1","5.4.0-1093.104~18.04.1","5.4.0-1094.105~18.04.1","5.4.0-1095.106~18.04.1","5.4.0-1096.107~18.04.1","5.4.0-1097.109~18.04.2","5.4.0-1098.110~18.04.2","5.4.0-1100.112~18.04.1","5.4.0-1101.113~18.04.1","5.4.0-1102.114~18.04.1","5.4.0-1103.115~18.04.1","5.4.0-1104.116~18.04.1","5.4.0-1105.117~18.04.1","5.4.0-1106.118~18.04.1","5.4.0-1107.119~18.04.1","5.4.0-1108.120~18.04.1","5.4.0-1109.121~18.04.1","5.4.0-1110.122~18.04.1","5.4.0-1111.123~18.04.1","5.4.0-1112.124~18.04.1","5.4.0-1114.126~18.04.1","5.4.0-1115.127~18.04.1","5.4.0-1116.128~18.04.1","5.4.0-1117.129~18.04.1","5.4.0-1118.130~18.04.1","5.4.0-1119.131~18.04.1","5.4.0-1120.132~18.04.1","5.4.0-1121.133~18.04.1","5.4.0-1122.134~18.04.1","5.4.0-1129.142~18.04.1","5.4.0-1130.143~18.04.1","5.4.0-1131.144~18.04.1","5.4.0-1132.145~18.04.1","5.4.0-1133.146~18.04.1","5.4.0-1134.147~18.04.1","5.4.0-1135.148~18.04.1","5.4.0-1136.149~18.04.1","5.4.0-1137.150~18.04.1","5.4.0-1139.152~18.04.1","5.4.0-1140.153~18.04.1","5.4.0-1143.156~18.04.1","5.4.0-1144.157~18.04.1","5.4.0-1145.158~18.04.1","5.4.0-1146.159~18.04.1","5.4.0-1147.160~18.04.1","5.4.0-1148.161~18.04.1","5.4.0-1149.162~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-18.19","5.3.0-24.26","5.4.0-9.12","5.4.0-18.22","5.4.0-21.25","5.4.0-24.28","5.4.0-25.29","5.4.0-26.30","5.4.0-28.32","5.4.0-29.33","5.4.0-31.35","5.4.0-33.37","5.4.0-37.41","5.4.0-39.43","5.4.0-40.44","5.4.0-42.46","5.4.0-45.49","5.4.0-47.51","5.4.0-48.52","5.4.0-51.56","5.4.0-52.57","5.4.0-53.59","5.4.0-54.60","5.4.0-56.62","5.4.0-58.64","5.4.0-59.65","5.4.0-60.67","5.4.0-62.70","5.4.0-64.72","5.4.0-65.73","5.4.0-66.74","5.4.0-67.75","5.4.0-70.78","5.4.0-71.79","5.4.0-72.80","5.4.0-73.82","5.4.0-74.83","5.4.0-77.86","5.4.0-80.90","5.4.0-81.91","5.4.0-84.94","5.4.0-86.97","5.4.0-88.99","5.4.0-89.100","5.4.0-90.101","5.4.0-91.102","5.4.0-92.103","5.4.0-94.106","5.4.0-96.109","5.4.0-97.110","5.4.0-99.112","5.4.0-100.113","5.4.0-104.118","5.4.0-105.119","5.4.0-107.121","5.4.0-109.123","5.4.0-110.124","5.4.0-113.127","5.4.0-117.132","5.4.0-120.136","5.4.0-121.137","5.4.0-122.138","5.4.0-124.140","5.4.0-125.141","5.4.0-126.142","5.4.0-128.144","5.4.0-131.147","5.4.0-132.148","5.4.0-135.152","5.4.0-136.153","5.4.0-137.154","5.4.0-139.156","5.4.0-144.161","5.4.0-146.163","5.4.0-147.164","5.4.0-148.165","5.4.0-149.166","5.4.0-150.167","5.4.0-152.169","5.4.0-153.170","5.4.0-155.172","5.4.0-156.173","5.4.0-159.176","5.4.0-162.179","5.4.0-163.180","5.4.0-164.181","5.4.0-165.182","5.4.0-166.183","5.4.0-167.184","5.4.0-169.187","5.4.0-170.188","5.4.0-171.189","5.4.0-172.190","5.4.0-173.191","5.4.0-174.193","5.4.0-176.196","5.4.0-177.197","5.4.0-181.201","5.4.0-182.202","5.4.0-186.206","5.4.0-187.207","5.4.0-189.209","5.4.0-190.210","5.4.0-192.212","5.4.0-193.213","5.4.0-195.215","5.4.0-196.216","5.4.0-198.218","5.4.0-200.220","5.4.0-202.222","5.4.0-204.224","5.4.0-205.225","5.4.0-208.228","5.4.0-211.231","5.4.0-212.232","5.4.0-214.234","5.4.0-215.235","5.4.0-216.236","5.4.0-218.238","5.4.0-219.239","5.4.0-220.240","5.4.0-221.241","5.4.0-222.242","5.4.0-223.243","5.4.0-224.244","5.4.0-225.245","5.4.0-227.247","5.4.0-228.248","5.4.0-229.249","5.4.0-230.250","5.4.0-231.251","5.4.0-233.253","5.4.0-234.254","5.4.0-238.258","5.4.0-241.261","5.4.0-242.262","5.4.0-244.264"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.3.0-1010.11","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1017.17","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.37","5.4.0-1037.39","5.4.0-1038.40","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1045.47","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1088.96","5.4.0-1089.97","5.4.0-1092.100","5.4.0-1093.101","5.4.0-1094.102","5.4.0-1096.104","5.4.0-1097.105","5.4.0-1099.107","5.4.0-1100.108","5.4.0-1101.109","5.4.0-1102.110","5.4.0-1103.111","5.4.0-1104.112","5.4.0-1105.113","5.4.0-1106.114","5.4.0-1107.115","5.4.0-1108.116","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.123","5.4.0-1114.124","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1129.139","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1142.152","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1148.158","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1153.163","5.4.0-1154.164","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.172","5.4.0-1162.173","5.4.0-1163.174","5.4.0-1164.175","5.4.0-1165.176","5.4.0-1166.177","5.4.0-1167.178"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1","5.15.0-1043.48~20.04.1","5.15.0-1044.49~20.04.1","5.15.0-1045.50~20.04.1","5.15.0-1047.52~20.04.1","5.15.0-1048.53~20.04.1","5.15.0-1049.54~20.04.1","5.15.0-1050.55~20.04.1","5.15.0-1051.56~20.04.1","5.15.0-1052.57~20.04.1","5.15.0-1053.58~20.04.1","5.15.0-1055.60~20.04.1","5.15.0-1056.61~20.04.1","5.15.0-1057.63~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1075.82~20.04.1","5.15.0-1077.84~20.04.1","5.15.0-1080.87~20.04.1","5.15.0-1081.88~20.04.1","5.15.0-1082.89~20.04.1","5.15.0-1083.90~20.04.1","5.15.0-1084.91~20.04.1","5.15.0-1086.93~20.04.1","5.15.0-1087.94~20.04.1","5.15.0-1088.95~20.04.1","5.15.0-1089.96~20.04.1","5.15.0-1090.97~20.04.1","5.15.0-1091.98~20.04.1","5.15.0-1092.99~20.04.1","5.15.0-1093.100~20.04.1","5.15.0-1095.102~20.04.1","5.15.0-1096.103~20.04.1","5.15.0-1097.104~20.04.1","5.15.0-1098.105~20.04.1","5.15.0-1099.106~20.04.1","5.15.0-1100.107~20.04.2","5.15.0-1101.108~20.04.1","5.15.0-1103.110~20.04.1","5.15.0-1104.111~20.04.1","5.15.0-1105.112~20.04.1","5.15.0-1106.113~20.04.1","5.15.0-1108.115~20.04.1","5.15.0-1109.116~20.04.1","5.15.0-1111.118~20.04.1","5.15.0-1112.119~20.04.1","5.15.0-1114.121~20.04.1","5.15.0-1115.122~20.04.1","5.15.0-1116.123~20.04.1","5.15.0-1117.124~20.04.1","5.15.0-1119.126~20.04.1","5.15.0-1120.127~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1006.6","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1010.10","5.4.0-1012.12","5.4.0-1016.16","5.4.0-1019.19","5.4.0-1020.20","5.4.0-1022.22","5.4.0-1023.23","5.4.0-1025.25","5.4.0-1026.26","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.38","5.4.0-1039.41","5.4.0-1040.42","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1072.75","5.4.0-1073.76","5.4.0-1074.77","5.4.0-1077.80","5.4.0-1078.81","5.4.0-1080.83","5.4.0-1083.87","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1098.104","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1103.109","5.4.0-1104.110","5.4.0-1105.111","5.4.0-1106.112","5.4.0-1107.113","5.4.0-1108.114","5.4.0-1109.115","5.4.0-1110.116","5.4.0-1111.117","5.4.0-1112.118","5.4.0-1113.119","5.4.0-1114.120","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1122.129","5.4.0-1123.130","5.4.0-1124.131","5.4.0-1126.133","5.4.0-1127.134","5.4.0-1128.135","5.4.0-1129.136","5.4.0-1130.137","5.4.0-1131.138","5.4.0-1132.139","5.4.0-1133.140","5.4.0-1134.141","5.4.0-1135.142","5.4.0-1136.143","5.4.0-1137.144","5.4.0-1138.145","5.4.0-1139.146","5.4.0-1140.147","5.4.0-1142.149","5.4.0-1143.150","5.4.0-1145.152","5.4.0-1147.154","5.4.0-1148.155","5.4.0-1149.156","5.4.0-1150.157","5.4.0-1151.158","5.4.0-1152.159","5.4.0-1153.160","5.4.0-1154.161","5.4.0-1156.163","5.4.0-1157.164","5.4.0-1160.166","5.4.0-1161.167","5.4.0-1162.168","5.4.0-1163.169","5.4.0-1164.170","5.4.0-1166.172","5.4.0-1167.173","5.4.0-1168.174","5.4.0-1169.175","5.4.0-1170.176","5.4.0-1171.177"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1056.64~20.04.1","5.15.0-1057.65~20.04.1","5.15.0-1058.66~20.04.2","5.15.0-1059.67~20.04.1","5.15.0-1060.69~20.04.1","5.15.0-1061.70~20.04.1","5.15.0-1063.72~20.04.1","5.15.0-1064.73~20.04.1","5.15.0-1065.74~20.04.1","5.15.0-1067.76~20.04.1","5.15.0-1068.77~20.04.1","5.15.0-1070.79~20.04.1","5.15.0-1071.80~20.04.1","5.15.0-1072.81~20.04.1","5.15.0-1073.82~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1079.88~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1082.91~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.1","5.15.0-1088.97~20.04.1","5.15.0-1089.98~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1094.103~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1102.111~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1110.119~20.04.1","5.15.0-1111.120~20.04.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1123.132~20.04.1","5.15.0-1125.134~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.10","5.4.0-1011.14","5.4.0-1012.15","5.4.0-1013.16","5.4.0-1016.19","5.4.0-1019.22","5.4.0-1020.23","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1040.44","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1049.55","5.4.0-1050.56","5.4.0-1054.60","5.4.0-1058.64","5.4.0-1059.65","5.4.0-1060.66","5.4.0-1062.68","5.4.0-1064.70","5.4.0-1065.71","5.4.0-1066.72","5.4.0-1068.74","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1072.78","5.4.0-1073.79","5.4.0-1074.80","5.4.0-1075.81","5.4.0-1076.82","5.4.0-1077.83","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1082.89","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1088.95","5.4.0-1089.96","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1092.99","5.4.0-1093.100","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.126","5.4.0-1120.127","5.4.0-1121.128","5.4.0-1123.130","5.4.0-1125.132"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1004.4","5.3.0-1009.10","5.3.0-1011.12","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1033.35","5.4.0-1034.37","5.4.0-1036.39","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1040.43","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1044.47","5.4.0-1046.49","5.4.0-1049.53","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1060.64","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.94","5.4.0-1087.95","5.4.0-1089.97","5.4.0-1090.98","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1096.105","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1128.137","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1142.151","5.4.0-1143.152","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163","5.4.0-1155.164","5.4.0-1156.165","5.4.0-1157.166","5.4.0-1159.168","5.4.0-1160.169","5.4.0-1161.170","5.4.0-1162.171","5.4.0-1163.172","5.4.0-1164.173","5.4.0-1165.174","5.4.0-1166.175","5.4.0-1167.177","5.4.0-1168.178","5.4.0-1169.179","5.4.0-1170.180"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1","5.15.0-1040.48~20.04.1","5.15.0-1041.49~20.04.1","5.15.0-1042.50~20.04.1","5.15.0-1044.52~20.04.1","5.15.0-1045.53~20.04.2","5.15.0-1046.54~20.04.1","5.15.0-1047.55~20.04.1","5.15.0-1048.56~20.04.1","5.15.0-1049.57~20.04.1","5.15.0-1051.59~20.04.1","5.15.0-1052.60~20.04.1","5.15.0-1053.61~20.04.1","5.15.0-1054.62~20.04.1","5.15.0-1055.63~20.04.1","5.15.0-1058.66~20.04.1","5.15.0-1059.67~20.04.1","5.15.0-1060.68~20.04.1","5.15.0-1062.70~20.04.1","5.15.0-1065.73~20.04.1","5.15.0-1066.74~20.04.1","5.15.0-1067.75~20.04.1","5.15.0-1068.76~20.04.1","5.15.0-1069.77~20.04.1","5.15.0-1070.78~20.04.1","5.15.0-1071.79~20.04.1","5.15.0-1072.80~20.04.1","5.15.0-1073.81~20.04.1","5.15.0-1074.83~20.04.1","5.15.0-1075.84~20.04.1","5.15.0-1077.86~20.04.1","5.15.0-1078.87~20.04.1","5.15.0-1081.90~20.04.1","5.15.0-1083.92~20.04.1","5.15.0-1085.94~20.04.1","5.15.0-1086.95~20.04.1","5.15.0-1087.96~20.04.2","5.15.0-1088.97~20.04.1","5.15.0-1090.99~20.04.1","5.15.0-1091.100~20.04.1","5.15.0-1092.101~20.04.1","5.15.0-1093.102~20.04.1","5.15.0-1095.104~20.04.1","5.15.0-1096.105~20.04.1","5.15.0-1097.106~20.04.1","5.15.0-1098.107~20.04.1","5.15.0-1099.108~20.04.1","5.15.0-1100.109~20.04.1","5.15.0-1101.110~20.04.1","5.15.0-1103.112~20.04.1","5.15.0-1104.113~20.04.1","5.15.0-1106.115~20.04.1","5.15.0-1108.117~20.04.1","5.15.0-1109.118~20.04.1","5.15.0-1111.121~20.04.1","5.15.0-1112.122~20.04.1","5.15.0-1114.124~20.04.1","5.15.0-1118.128~20.04.1","5.15.0-1120.130~20.04.1","5.15.0-1121.131~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.37~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1044.51~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1048.55~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.58~20.04.1","5.15.0-1052.59~20.04.1","5.15.0-1053.60~20.04.1","5.15.0-1054.61~20.04.1","5.15.0-1055.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.96~20.04.1","5.15.0-87.97~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-130.140~20.04.1","5.15.0-131.141~20.04.1","5.15.0-134.145~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-151.161~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.3","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-176.186~20.04.1","5.15.0-177.187~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-185.195~20.04.1","5.15.0-186.196~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1","5.15.0-198.208~20.04.1","5.15.0-202.212~20.04.1","5.15.0-203.213~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1003.4","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1006.7","5.4.0-1007.8","5.4.0-1008.9","5.4.0-1010.11","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1017.19","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1020.22","5.4.0-1021.23","5.4.0-1023.25","5.4.0-1026.29","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1036.41","5.4.0-1037.42","5.4.0-1040.45","5.4.0-1041.46","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1049.54","5.4.0-1050.55","5.4.0-1051.56","5.4.0-1052.57","5.4.0-1053.58","5.4.0-1054.59","5.4.0-1056.61","5.4.0-1057.62","5.4.0-1058.63","5.4.0-1059.64","5.4.0-1060.65","5.4.0-1061.66","5.4.0-1063.68","5.4.0-1064.69","5.4.0-1065.70","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1068.73","5.4.0-1069.74","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1077.82","5.4.0-1078.83","5.4.0-1079.84","5.4.0-1080.85","5.4.0-1081.86","5.4.0-1082.87","5.4.0-1083.88","5.4.0-1084.89","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1088.93","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1092.97","5.4.0-1093.98","5.4.0-1094.99","5.4.0-1095.100","5.4.0-1096.101","5.4.0-1097.102","5.4.0-1098.103","5.4.0-1099.104","5.4.0-1100.105","5.4.0-1102.107","5.4.0-1103.108","5.4.0-1104.109","5.4.0-1105.110","5.4.0-1107.112","5.4.0-1108.113","5.4.0-1109.114","5.4.0-1111.116","5.4.0-1112.117","5.4.0-1113.118"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-ibm-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1","5.15.0-1036.39~20.04.1","5.15.0-1037.40~20.04.1","5.15.0-1038.41~20.04.1","5.15.0-1040.43~20.04.1","5.15.0-1041.44~20.04.1","5.15.0-1042.45~20.04.1","5.15.0-1043.46~20.04.1","5.15.0-1044.47~20.04.1","5.15.0-1045.48~20.04.1","5.15.0-1046.49~20.04.1","5.15.0-1047.50~20.04.1","5.15.0-1048.51~20.04.1","5.15.0-1049.52~20.04.1","5.15.0-1050.53~20.04.1","5.15.0-1053.56~20.04.1","5.15.0-1054.57~20.04.1","5.15.0-1055.58~20.04.1","5.15.0-1057.60~20.04.1","5.15.0-1058.61~20.04.1","5.15.0-1059.62~20.04.1","5.15.0-1060.63~20.04.1","5.15.0-1061.64~20.04.1","5.15.0-1062.65~20.04.1","5.15.0-1063.66~20.04.1","5.15.0-1064.67~20.04.1","5.15.0-1065.68~20.04.1","5.15.0-1066.69~20.04.1","5.15.0-1067.70~20.04.1","5.15.0-1068.71~20.04.1","5.15.0-1069.72~20.04.1","5.15.0-1074.77~20.04.1","5.15.0-1075.78~20.04.1","5.15.0-1076.79~20.04.1","5.15.0-1078.81~20.04.1","5.15.0-1079.82~20.04.1","5.15.0-1080.83~20.04.1","5.15.0-1081.84~20.04.1","5.15.0-1083.86~20.04.1","5.15.0-1085.88~20.04.1","5.15.0-1086.89~20.04.1","5.15.0-1087.90~20.04.1","5.15.0-1089.92~20.04.1","5.15.0-1090.93~20.04.1","5.15.0-1091.94~20.04.1","5.15.0-1092.95~20.04.1","5.15.0-1093.96~20.04.1","5.15.0-1094.97~20.04.1","5.15.0-1095.98~20.04.1","5.15.0-1097.100~20.04.1","5.15.0-1098.101~20.04.1","5.15.0-1099.102~20.04.1","5.15.0-1100.103~20.04.1","5.15.0-1102.105~20.04.1","5.15.0-1103.106~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1","5.15.0-1111.115~20.04.1","5.15.0-1113.117~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.49~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1060.66~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1064.70~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.2","5.15.0-1074.80~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.1","5.15.0-1086.92~20.04.1","5.15.0-1087.93~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1099.105~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1103.109~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1107.113~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1","5.15.0-1112.118~20.04.1","5.15.0-1114.120~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-iot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.3","5.4.0-1004.6","5.4.0-1005.7","5.4.0-1006.8","5.4.0-1009.11","5.4.0-1010.12","5.4.0-1011.13","5.4.0-1012.14","5.4.0-1013.15","5.4.0-1014.16","5.4.0-1017.18","5.4.0-1018.19","5.4.0-1019.20","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1042.43","5.4.0-1043.44","5.4.0-1044.45","5.4.0-1045.46","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1004.4","5.4.0-1006.6","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1023.23","5.4.0-1024.24","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1044.46","5.4.0-1045.47","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1050.52","5.4.0-1051.53","5.4.0-1053.55","5.4.0-1054.56","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1068.72","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1082.88","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.92","5.4.0-1087.93","5.4.0-1088.94","5.4.0-1089.95","5.4.0-1090.96","5.4.0-1091.97","5.4.0-1092.98","5.4.0-1093.99","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1096.102","5.4.0-1097.103","5.4.0-1098.104","5.4.0-1099.105","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1102.108","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112","5.4.0-1106.113","5.4.0-1107.114","5.4.0-1108.115","5.4.0-1109.116","5.4.0-1110.117","5.4.0-1111.118","5.4.0-1112.119","5.4.0-1113.120","5.4.0-1114.121","5.4.0-1115.122","5.4.0-1116.123","5.4.0-1117.124","5.4.0-1118.125","5.4.0-1119.127","5.4.0-1120.128","5.4.0-1121.129","5.4.0-1122.130","5.4.0-1123.131","5.4.0-1124.132","5.4.0-1125.133","5.4.0-1126.134","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1139.148","5.4.0-1140.149","5.4.0-1141.150","5.4.0-1143.152","5.4.0-1144.153","5.4.0-1145.154","5.4.0-1146.155","5.4.0-1147.156","5.4.0-1148.157","5.4.0-1149.158","5.4.0-1150.159","5.4.0-1151.160","5.4.0-1152.161","5.4.0-1153.162","5.4.0-1154.163"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1","5.15.0-82.91~20.04.1","5.15.0-83.92~20.04.1","5.15.0-84.93~20.04.1","5.15.0-86.95~20.04.1","5.15.0-87.96~20.04.1","5.15.0-88.98~20.04.1","5.15.0-89.99~20.04.1","5.15.0-91.101~20.04.1","5.15.0-92.102~20.04.1","5.15.0-94.104~20.04.1","5.15.0-97.107~20.04.1","5.15.0-100.110~20.04.1","5.15.0-101.111~20.04.1","5.15.0-102.112~20.04.1","5.15.0-105.115~20.04.1","5.15.0-106.116~20.04.1","5.15.0-107.117~20.04.1","5.15.0-110.120~20.04.1","5.15.0-113.123~20.04.1","5.15.0-116.126~20.04.1","5.15.0-117.127~20.04.1","5.15.0-118.128~20.04.1","5.15.0-119.129~20.04.1","5.15.0-121.131~20.04.1","5.15.0-122.132~20.04.1","5.15.0-124.134~20.04.1","5.15.0-125.135~20.04.1","5.15.0-126.136~20.04.1","5.15.0-127.137~20.04.1","5.15.0-128.138~20.04.1","5.15.0-129.139~20.04.1","5.15.0-131.141~20.04.1","5.15.0-133.143~20.04.1","5.15.0-134.145~20.04.1","5.15.0-135.146~20.04.1","5.15.0-136.147~20.04.1","5.15.0-138.148~20.04.1","5.15.0-139.149~20.04.1","5.15.0-140.150~20.04.1","5.15.0-142.152~20.04.1","5.15.0-143.153~20.04.1","5.15.0-144.157~20.04.1","5.15.0-145.158~20.04.1","5.15.0-152.162~20.04.1","5.15.0-153.163~20.04.1","5.15.0-156.166~20.04.1","5.15.0-157.167~20.04.1","5.15.0-160.170~20.04.1","5.15.0-161.171~20.04.1","5.15.0-163.173~20.04.1","5.15.0-164.174~20.04.1","5.15.0-168.178~20.04.1","5.15.0-170.180~20.04.1","5.15.0-171.181~20.04.1","5.15.0-173.183~20.04.1","5.15.0-174.184~20.04.1","5.15.0-175.185~20.04.1","5.15.0-177.187~20.04.1","5.15.0-178.188~20.04.1","5.15.0-179.189~20.04.1","5.15.0-181.191~20.04.1","5.15.0-183.193~20.04.1","5.15.0-184.194~20.04.1","5.15.0-190.200~20.04.1","5.15.0-191.201~20.04.1","5.15.0-194.204~20.04.1","5.15.0-195.205~20.04.1","5.15.0-197.207~20.04.1","5.15.0-198.208~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-nvidia-tegra-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1009.9~20.04.1","5.15.0-1010.10~20.04.1","5.15.0-1012.12~20.04.1","5.15.0-1014.14~20.04.1","5.15.0-1015.15~20.04.1","5.15.0-1016.16~20.04.1","5.15.0-1017.17~20.04.1","5.15.0-1018.18~20.04.1","5.15.0-1019.19~20.04.1","5.15.0-1020.20~20.04.1","5.15.0-1022.22~20.04.1","5.15.0-1025.25~20.04.1","5.15.0-1027.27~20.04.1","5.15.0-1030.30~20.04.1","5.15.0-1032.32~20.04.1","5.15.0-1039.39~20.04.1","5.15.0-1040.40~20.04.1","5.15.0-1041.41~20.04.1","5.15.0-1042.42~20.04.1","5.15.0-1043.43~20.04.1","5.15.0-1044.44~20.04.1","5.15.0-1045.45~20.04.1","5.15.0-1046.46~20.04.1","5.15.0-1047.47~20.04.1","5.15.0-1048.48~20.04.1","5.15.0-1049.49~20.04.1","5.15.0-1050.50~20.04.1","5.15.0-1051.51~20.04.1","5.15.0-1052.52~20.04.2","5.15.0-1053.53~20.04.1","5.15.0-1055.55~20.04.1","5.15.0-1057.57~20.04.1","5.15.0-1058.58~20.04.1","5.15.0-1060.60~20.04.1","5.15.0-1061.61~20.04.1","5.15.0-1063.63~20.04.1","5.15.0-1064.66~20.04.1","5.15.0-1065.67~20.04.1","5.15.0-1066.68~20.04.1","5.15.0-1067.69~20.04.1","5.15.0-1068.70~20.04.1","5.15.0-1070.72~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1002.2","5.3.0-1007.8","5.3.0-1008.9","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1034.36","5.4.0-1035.38","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1039.42","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1069.75","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1073.79","5.4.0-1076.83","5.4.0-1078.86","5.4.0-1079.87","5.4.0-1081.89","5.4.0-1082.90","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1090.99","5.4.0-1091.100","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1094.103","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1099.108","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117","5.4.0-1109.118","5.4.0-1110.119","5.4.0-1111.120","5.4.0-1112.121","5.4.0-1113.122","5.4.0-1115.124","5.4.0-1116.125","5.4.0-1117.126","5.4.0-1118.127","5.4.0-1119.128","5.4.0-1120.129","5.4.0-1121.130","5.4.0-1122.131","5.4.0-1123.132","5.4.0-1124.133","5.4.0-1125.134","5.4.0-1126.135","5.4.0-1127.136","5.4.0-1129.138","5.4.0-1130.139","5.4.0-1131.140","5.4.0-1132.141","5.4.0-1133.142","5.4.0-1134.143","5.4.0-1135.144","5.4.0-1136.145","5.4.0-1137.146","5.4.0-1138.147","5.4.0-1140.150","5.4.0-1141.151","5.4.0-1142.152","5.4.0-1143.153","5.4.0-1144.154","5.4.0-1145.155","5.4.0-1146.156","5.4.0-1147.157","5.4.0-1149.159","5.4.0-1150.160","5.4.0-1151.161","5.4.0-1152.162","5.4.0-1154.164","5.4.0-1155.165","5.4.0-1156.166","5.4.0-1157.167","5.4.0-1158.168","5.4.0-1159.169","5.4.0-1160.170","5.4.0-1161.171","5.4.0-1162.172","5.4.0-1163.173","5.4.0-1164.174","5.4.0-1165.175"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1041.47~20.04.1","5.15.0-1042.48~20.04.1","5.15.0-1044.50~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1047.53~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1053.59~20.04.1","5.15.0-1054.60~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1","5.15.0-1067.73~20.04.1","5.15.0-1068.74~20.04.1","5.15.0-1069.75~20.04.1","5.15.0-1070.76~20.04.1","5.15.0-1071.77~20.04.1","5.15.0-1072.78~20.04.1","5.15.0-1073.79~20.04.1","5.15.0-1074.80~20.04.1","5.15.0-1075.81~20.04.1","5.15.0-1076.82~20.04.1","5.15.0-1077.83~20.04.1","5.15.0-1078.84~20.04.1","5.15.0-1079.85~20.04.1","5.15.0-1080.86~20.04.1","5.15.0-1081.87~20.04.1","5.15.0-1083.89~20.04.1","5.15.0-1084.90~20.04.1","5.15.0-1085.91~20.04.3","5.15.0-1086.92~20.04.1","5.15.0-1088.94~20.04.1","5.15.0-1090.96~20.04.1","5.15.0-1091.97~20.04.1","5.15.0-1092.98~20.04.1","5.15.0-1093.99~20.04.1","5.15.0-1094.100~20.04.1","5.15.0-1095.101~20.04.1","5.15.0-1096.102~20.04.1","5.15.0-1097.103~20.04.1","5.15.0-1098.104~20.04.1","5.15.0-1100.106~20.04.1","5.15.0-1101.107~20.04.1","5.15.0-1102.108~20.04.1","5.15.0-1104.110~20.04.1","5.15.0-1106.112~20.04.1","5.15.0-1108.114~20.04.1","5.15.0-1109.115~20.04.1","5.15.0-1110.116~20.04.1","5.15.0-1111.117~20.04.1","5.15.0-1114.120~20.04.1","5.15.0-1116.122~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.7","5.4.0-1008.8","5.4.0-1011.11","5.4.0-1012.12","5.4.0-1013.13","5.4.0-1015.15","5.4.0-1016.17","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1029.32","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1033.36","5.4.0-1034.37","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1038.41","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1050.56","5.4.0-1052.58","5.4.0-1053.60","5.4.0-1055.62","5.4.0-1056.63","5.4.0-1058.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1062.70","5.4.0-1065.75","5.4.0-1066.76","5.4.0-1068.78","5.4.0-1069.79","5.4.0-1070.80","5.4.0-1071.81","5.4.0-1073.84","5.4.0-1074.85","5.4.0-1077.88","5.4.0-1078.89","5.4.0-1079.90","5.4.0-1080.91","5.4.0-1081.92","5.4.0-1082.93","5.4.0-1083.94","5.4.0-1084.95","5.4.0-1085.96","5.4.0-1086.97","5.4.0-1088.99","5.4.0-1089.100","5.4.0-1090.101","5.4.0-1091.102","5.4.0-1092.103","5.4.0-1093.104","5.4.0-1094.105","5.4.0-1095.106","5.4.0-1096.107","5.4.0-1097.109","5.4.0-1098.110","5.4.0-1100.112","5.4.0-1101.113","5.4.0-1102.114","5.4.0-1103.115","5.4.0-1104.116","5.4.0-1105.117","5.4.0-1106.118","5.4.0-1107.119","5.4.0-1108.120","5.4.0-1109.121","5.4.0-1110.122","5.4.0-1111.123","5.4.0-1112.124","5.4.0-1113.125","5.4.0-1114.126","5.4.0-1115.127","5.4.0-1116.128","5.4.0-1117.129","5.4.0-1118.130","5.4.0-1119.131","5.4.0-1120.132","5.4.0-1121.133","5.4.0-1122.134","5.4.0-1129.142","5.4.0-1130.143","5.4.0-1131.144","5.4.0-1132.145","5.4.0-1133.146","5.4.0-1134.147","5.4.0-1135.148","5.4.0-1136.149","5.4.0-1137.150","5.4.0-1139.152","5.4.0-1140.153","5.4.0-1143.156","5.4.0-1144.157","5.4.0-1145.158","5.4.0-1146.159","5.4.0-1147.160","5.4.0-1148.161","5.4.0-1149.162"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1029.33~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1032.36~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.2","5.15.0-1037.41~20.04.2","5.15.0-1038.42~20.04.2","5.15.0-1039.43~20.04.2","5.15.0-1040.44~20.04.3","5.15.0-1041.45~20.04.1","5.15.0-1043.47~20.04.1","5.15.0-1044.48~20.04.1","5.15.0-1045.49~20.04.1","5.15.0-1046.50~20.04.1","5.15.0-1047.51~20.04.1","5.15.0-1048.52~20.04.1","5.15.0-1049.53~20.04.2","5.15.0-1050.54~20.04.1","5.15.0-1051.55~20.04.1","5.15.0-1052.56~20.04.1","5.15.0-1053.57~20.04.1","5.15.0-1056.60~20.04.1","5.15.0-1057.61~20.04.1","5.15.0-1058.62~20.04.1","5.15.0-1059.63~20.04.1","5.15.0-1060.64~20.04.1","5.15.0-1061.65~20.04.1","5.15.0-1062.66~20.04.1","5.15.0-1063.67~20.04.1","5.15.0-1064.68~20.04.1","5.15.0-1065.69~20.04.1","5.15.0-1066.70~20.04.1","5.15.0-1067.71~20.04.1","5.15.0-1068.72~20.04.1","5.15.0-1069.73~20.04.1","5.15.0-1070.74~20.04.1","5.15.0-1071.75~20.04.1","5.15.0-1072.76~20.04.1","5.15.0-1073.77~20.04.1","5.15.0-1074.78~20.04.1","5.15.0-1075.79~20.04.1","5.15.0-1076.80~20.04.1","5.15.0-1077.81~20.04.1","5.15.0-1078.82~20.04.1","5.15.0-1079.83~20.04.1","5.15.0-1081.85~20.04.1","5.15.0-1082.86~20.04.1","5.15.0-1083.87~20.04.1","5.15.0-1084.88~20.04.1","5.15.0-1085.89~20.04.1","5.15.0-1086.90~20.04.1","5.15.0-1087.91~20.04.1","5.15.0-1088.92~20.04.1","5.15.0-1090.94~20.04.1","5.15.0-1091.95~20.04.1","5.15.0-1092.96~20.04.1","5.15.0-1093.97~20.04.2","5.15.0-1094.98~20.04.1","5.15.0-1095.99~20.04.1","5.15.0-1096.100~20.04.1","5.15.0-1097.101~20.04.1","5.15.0-1098.102~20.04.1","5.15.0-1099.103~20.04.1","5.15.0-1100.104~20.04.1","5.15.0-1102.106~20.04.1","5.15.0-1103.107~20.04.1","5.15.0-1105.109~20.04.1","5.15.0-1106.110~20.04.1","5.15.0-1107.111~20.04.1","5.15.0-1108.112~20.04.1","5.15.0-1109.113~20.04.1","5.15.0-1110.114~20.04.1","5.15.0-1111.115~20.04.1","5.15.0-1113.117~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1020.24","5.4.0-1021.25","5.4.0-1022.26","5.4.0-1023.27","5.4.0-1024.28","5.4.0-1025.29","5.4.0-1026.30","5.4.0-1027.31","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1030.34","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1035.39","5.4.0-1036.40","5.4.0-1037.41","5.4.0-1038.42","5.4.0-1039.43","5.4.0-1040.44","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.51","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1050.54","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1058.62","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1082.86","5.4.0-1083.87","5.4.0-1084.88"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2","5.4.0-1069.73+fips2","5.4.0-1071.76+fips1","5.4.0-1072.77+fips1","5.4.0-1073.78+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1083.90+fips1","5.4.0-1085.92+fips1","5.4.0-1086.93+fips1","5.4.0-1088.96+fips1","5.4.0-1089.97+fips1","5.4.0-1092.100+fips1","5.4.0-1093.101+fips1","5.4.0-1094.102+fips1","5.4.0-1096.104+fips1","5.4.0-1099.107+fips1","5.4.0-1100.108+fips1","5.4.0-1101.109+fips1","5.4.0-1102.110+fips1","5.4.0-1103.111+fips1","5.4.0-1104.112+fips1","5.4.0-1105.113+fips1","5.4.0-1106.114+fips1","5.4.0-1107.115+fips1","5.4.0-1108.116+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.123+fips1","5.4.0-1114.124+fips1","5.4.0-1116.126+fips1","5.4.0-1117.127+fips1","5.4.0-1118.128+fips1","5.4.0-1119.129+fips1","5.4.0-1120.130+fips1","5.4.0-1121.131+fips1","5.4.0-1122.132+fips1","5.4.0-1123.133+fips1","5.4.0-1124.134+fips1","5.4.0-1125.135+fips1","5.4.0-1126.136+fips2","5.4.0-1127.137+fips1","5.4.0-1128.138+fips1","5.4.0-1129.139+fips1","5.4.0-1130.140+fips1","5.4.0-1131.141+fips1","5.4.0-1132.142+fips1","5.4.0-1133.143+fips1","5.4.0-1134.144+fips1","5.4.0-1135.145+fips1","5.4.0-1136.146+fips1","5.4.0-1137.147+fips1","5.4.0-1139.149+fips1","5.4.0-1140.151+fips1","5.4.0-1142.153+fips1","5.4.0-1144.155+fips1","5.4.0-1145.156+fips1","5.4.0-1146.156+fips1","5.4.0-1147.157+fips1","5.4.0-1148.158+fips1","5.4.0-1149.159+fips1","5.4.0-1150.160+fips1","5.4.0-1151.161+fips1","5.4.0-1152.162+fips1","5.4.0-1153.163+fips1","5.4.0-1154.164+fips1","5.4.0-1155.165+fips1","5.4.0-1156.166+fips1","5.4.0-1157.167+fips1","5.4.0-1158.168+fips1","5.4.0-1159.169+fips1","5.4.0-1160.170+fips1","5.4.0-1161.172+fips1","5.4.0-1163.174+fips1","5.4.0-1165.176+fips1","5.4.0-1166.177+fips1","5.4.0-1167.178+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1","5.4.0-1073.76+fips1","5.4.0-1074.77+fips1","5.4.0-1076.79+fips1","5.4.0-1078.81+fips1","5.4.0-1080.83+fips1","5.4.0-1083.87+fips1","5.4.0-1085.90+fips1","5.4.0-1086.91+fips1","5.4.0-1089.94+fips1","5.4.0-1090.95+fips1","5.4.0-1091.96+fips1","5.4.0-1094.100+fips1","5.4.0-1095.101+fips1","5.4.0-1098.104+fips1","5.4.0-1100.106+fips1","5.4.0-1101.107+fips1","5.4.0-1103.109+fips1","5.4.0-1104.110+fips1","5.4.0-1105.111+fips1","5.4.0-1106.112+fips1","5.4.0-1107.113+fips1","5.4.0-1108.114+fips1","5.4.0-1109.115+fips1","5.4.0-1110.116+fips1","5.4.0-1111.117+fips1","5.4.0-1112.118+fips1","5.4.0-1113.119+fips1","5.4.0-1114.120+fips1","5.4.0-1115.122+fips1","5.4.0-1116.123+fips1","5.4.0-1117.124+fips1","5.4.0-1118.125+fips1","5.4.0-1119.126+fips1","5.4.0-1121.128+fips1","5.4.0-1122.129+fips1","5.4.0-1123.130+fips1","5.4.0-1124.131+fips1","5.4.0-1126.133+fips1","5.4.0-1127.134+fips1","5.4.0-1128.135+fips1","5.4.0-1129.136+fips1","5.4.0-1130.137+fips1","5.4.0-1131.138+fips1","5.4.0-1132.139+fips1","5.4.0-1133.140+fips1","5.4.0-1134.141+fips1","5.4.0-1135.142+fips1","5.4.0-1136.143+fips1","5.4.0-1137.144+fips1","5.4.0-1138.145+fips1","5.4.0-1139.146+fips1","5.4.0-1140.147+fips1","5.4.0-1142.149+fips1","5.4.0-1143.150+fips1","5.4.0-1145.152+fips1","5.4.0-1147.154+fips1","5.4.0-1148.156+fips1","5.4.0-1149.157+fips1","5.4.0-1151.158+fips1","5.4.0-1152.159+fips1","5.4.0-1153.160+fips1","5.4.0-1154.161+fips1","5.4.0-1155.162+fips1","5.4.0-1157.164+fips1","5.4.0-1158.165+fips1","5.4.0-1160.166+fips1","5.4.0-1161.167+fips1","5.4.0-1162.168+fips1","5.4.0-1163.169+fips1","5.4.0-1164.170+fips1","5.4.0-1166.172+fips1","5.4.0-1167.173+fips1","5.4.0-1168.174+fips1","5.4.0-1170.176+fips1","5.4.0-1171.177+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1026.30","5.4.0-1028.32","5.4.0-1031.36","5.4.0-1032.37","5.4.0-1033.38","5.4.0-1034.40","5.4.0-1035.41","5.4.0-1036.42","5.4.0-1037.43","5.4.0-1038.44","5.4.0-1040.46","5.4.0-1041.47","5.4.0-1042.48","5.4.0-1043.49","5.4.0-1045.51","5.4.0-1046.52","5.4.0-1047.53","5.4.0-1048.54","5.4.0-1049.55","5.4.0-1051.57","5.4.0-1054.61","5.4.0-1056.64","5.4.0-1057.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1061.69","5.4.0-1062.70","5.4.0-1064.73","5.4.0-1065.74","5.4.0-1068.77","5.4.0-1069.78","5.4.0-1070.79","5.4.0-1072.81","5.4.0-1073.82","5.4.0-1074.83","5.4.0-1075.84","5.4.0-1076.85","5.4.0-1077.86","5.4.0-1078.87","5.4.0-1079.88","5.4.0-1080.89","5.4.0-1081.90","5.4.0-1082.91","5.4.0-1083.92","5.4.0-1084.93","5.4.0-1085.94","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1088.97","5.4.0-1089.98","5.4.0-1090.100","5.4.0-1091.101","5.4.0-1092.102","5.4.0-1094.104","5.4.0-1095.105","5.4.0-1096.106","5.4.0-1097.107","5.4.0-1098.108","5.4.0-1099.109","5.4.0-1100.110","5.4.0-1101.111","5.4.0-1102.112","5.4.0-1103.113","5.4.0-1104.114","5.4.0-1105.115","5.4.0-1106.116","5.4.0-1107.117","5.4.0-1108.118","5.4.0-1109.119","5.4.0-1110.120","5.4.0-1111.121","5.4.0-1112.122","5.4.0-1116.126","5.4.0-1117.127","5.4.0-1118.128","5.4.0-1119.129","5.4.0-1120.130","5.4.0-1121.131","5.4.0-1122.132","5.4.0-1123.133","5.4.0-1124.134","5.4.0-1125.135","5.4.0-1126.136","5.4.0-1127.137","5.4.0-1128.138","5.4.0-1130.140","5.4.0-1131.141","5.4.0-1132.142","5.4.0-1133.143","5.4.0-1134.144","5.4.0-1135.145","5.4.0-1136.146","5.4.0-1137.147","5.4.0-1138.148","5.4.0-1139.149","5.4.0-1140.150","5.4.0-1141.151"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1","5.4.0-1067.71~20.04.1","5.4.0-1069.73+fips2","5.4.0-1071.75+fips1","5.4.0-1073.78+fips1","5.4.0-1075.80+fips1","5.4.0-1078.84+fips1","5.4.0-1080.87+fips1","5.4.0-1081.88+fips1","5.4.0-1086.94+fips1","5.4.0-1087.95+fips1","5.4.0-1089.97+fips1","5.4.0-1092.101+fips1","5.4.0-1093.102+fips1","5.4.0-1096.105+fips1","5.4.0-1097.106+fips1","5.4.0-1098.107+fips1","5.4.0-1100.109+fips1","5.4.0-1101.110+fips1","5.4.0-1102.111+fips1","5.4.0-1103.112+fips1","5.4.0-1104.113+fips1","5.4.0-1105.114+fips1","5.4.0-1106.115+fips1","5.4.0-1107.116+fips1","5.4.0-1108.117+fips1","5.4.0-1109.118+fips1","5.4.0-1110.119+fips1","5.4.0-1111.120+fips1","5.4.0-1112.121+fips1","5.4.0-1113.122+fips1","5.4.0-1115.124+fips1","5.4.0-1116.125+fips1","5.4.0-1117.126+fips1","5.4.0-1118.127+fips1","5.4.0-1120.129+fips1","5.4.0-1121.130+fips1","5.4.0-1122.131+fips1","5.4.0-1124.133+fips1","5.4.0-1125.134+fips1","5.4.0-1126.135+fips1","5.4.0-1127.136+fips1","5.4.0-1128.137+fips1","5.4.0-1129.138+fips1","5.4.0-1130.139+fips1","5.4.0-1131.140+fips1","5.4.0-1132.141+fips1","5.4.0-1133.142+fips1","5.4.0-1134.143+fips1","5.4.0-1135.144+fips1","5.4.0-1136.145+fips1","5.4.0-1137.146+fips1","5.4.0-1138.147+fips1","5.4.0-1139.148+fips1","5.4.0-1140.149+fips1","5.4.0-1141.150+fips1","5.4.0-1142.151+fips1","5.4.0-1143.152+fips1","5.4.0-1145.154+fips1","5.4.0-1146.155+fips1","5.4.0-1147.156+fips1","5.4.0-1148.157+fips1","5.4.0-1149.158+fips1","5.4.0-1150.159+fips1","5.4.0-1151.160+fips1","5.4.0-1152.161+fips1","5.4.0-1153.162+fips1","5.4.0-1154.163+fips1","5.4.0-1155.164+fips1","5.4.0-1156.165+fips1","5.4.0-1157.166+fips1","5.4.0-1159.168+fips1","5.4.0-1160.169+fips1","5.4.0-1161.170+fips1","5.4.0-1162.171+fips1","5.4.0-1163.172+fips1","5.4.0-1164.173+fips1","5.4.0-1165.174+fips1","5.4.0-1166.175+fips1","5.4.0-1167.176+fips1","5.4.0-1168.178+fips1","5.4.0-1169.179+fips1","5.4.0-1170.180+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1022.22+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1007.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1021.21+fips1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.96","5.15.0-87.97","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-112.122","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-130.140","5.15.0-131.141","5.15.0-133.144","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-151.161","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-176.186","5.15.0-177.187","5.15.0-179.189","5.15.0-181.191","5.15.0-185.195","5.15.0-186.196","5.15.0-187.197","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204","5.15.0-198.208","5.15.0-202.212","5.15.0-203.213"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1055.60","5.15.0-1056.61","5.15.0-1057.63","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1076.83","5.15.0-1078.85","5.15.0-1079.86","5.15.0-1080.87","5.15.0-1081.88","5.15.0-1082.89","5.15.0-1083.90","5.15.0-1084.91","5.15.0-1085.92","5.15.0-1086.93","5.15.0-1087.94","5.15.0-1088.95","5.15.0-1089.96","5.15.0-1090.97","5.15.0-1091.98","5.15.0-1092.99","5.15.0-1093.100","5.15.0-1095.102","5.15.0-1096.103","5.15.0-1097.104","5.15.0-1098.105","5.15.0-1099.106","5.15.0-1100.107","5.15.0-1101.108","5.15.0-1103.110","5.15.0-1104.111","5.15.0-1105.112","5.15.0-1106.113","5.15.0-1108.115","5.15.0-1109.116","5.15.0-1111.118","5.15.0-1112.119","5.15.0-1113.120","5.15.0-1114.121","5.15.0-1115.122","5.15.0-1116.123","5.15.0-1117.124","5.15.0-1119.126","5.15.0-1120.127"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1012.12~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.2","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1022.22~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1023.25~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1035.37~22.04.1","6.8.0-1036.38~22.04.1","6.8.0-1039.41~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.44~22.04.1","6.8.0-1043.45~22.04.1","6.8.0-1044.46~22.04.1","6.8.0-1045.47~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1057.60~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.2","6.8.0-1063.66~22.04.1","6.8.0-1064.67~22.04.1","6.8.0-1065.68~22.04.1","6.8.0-1066.69~22.04.1","6.8.0-1069.74~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1056.64","5.15.0-1057.65","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.69","5.15.0-1061.70","5.15.0-1063.72","5.15.0-1064.73","5.15.0-1066.75","5.15.0-1067.76","5.15.0-1068.77","5.15.0-1070.79","5.15.0-1071.80","5.15.0-1072.81","5.15.0-1073.82","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1084.93","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1101.110","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1109.118","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1121.130","5.15.0-1122.131","5.15.0-1123.132","5.15.0-1125.134"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7~22.04.1","6.5.0-1009.9~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.19~22.04.2","6.5.0-1019.20~22.04.1","6.5.0-1021.22~22.04.1","6.5.0-1022.23~22.04.1","6.5.0-1023.24~22.04.1","6.5.0-1024.25~22.04.1","6.5.0-1025.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1","6.8.0-1025.30~22.04.1","6.8.0-1026.31~22.04.1","6.8.0-1027.32~22.04.1","6.8.0-1028.33~22.04.1","6.8.0-1029.34~22.04.1","6.8.0-1030.35~22.04.1","6.8.0-1031.36~22.04.1","6.8.0-1034.39~22.04.1","6.8.0-1036.42~22.04.1","6.8.0-1040.46~22.04.1","6.8.0-1041.47~22.04.1","6.8.0-1044.50~22.04.1","6.8.0-1051.57~22.04.1","6.8.0-1052.58~22.04.1","6.8.0-1059.65~22.04.1","6.8.0-1062.69~22.04.1","6.8.0-1063.71~22.04.1","6.8.0-1064.72~22.04.1","6.8.0-1065.73~22.04.1","6.8.0-1067.75~22.04.1","6.8.0-1068.76~22.04.1","6.8.0-1070.78~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1","5.15.0-1045.52.1","5.15.0-1046.53.1","5.15.0-1047.54.1","5.15.0-1049.56.1","5.15.0-1050.57.1","5.15.0-1051.59.1","5.15.0-1052.60.1","5.15.0-1053.61.1","5.15.0-1054.62.1","5.15.0-1056.64.1","5.15.0-1057.65.1","5.15.0-1058.66.1","5.15.0-1059.67.1","5.15.0-1060.69.1","5.15.0-1061.70.1","5.15.0-1063.72.1","5.15.0-1064.73.1","5.15.0-1065.74.1","5.15.0-1067.76.1","5.15.0-1068.77.1","5.15.0-1070.79.1","5.15.0-1071.80.1","5.15.0-1072.81.1","5.15.0-1073.82.1","5.15.0-1076.85.1","5.15.0-1078.87.1","5.15.0-1081.90.1","5.15.0-1082.91.1","5.15.0-1084.93.1","5.15.0-1086.95.1","5.15.0-1087.96.1","5.15.0-1088.97.1","5.15.0-1089.98.1","5.15.0-1090.99.1","5.15.0-1091.100.1","5.15.0-1092.101.1","5.15.0-1094.103.1","5.15.0-1095.104.1","5.15.0-1096.105.1","5.15.0-1097.106.1","5.15.0-1098.107.1","5.15.0-1102.111.1","5.15.0-1109.118.1","5.15.0-1110.119.1","5.15.0-1111.120.1","5.15.0-1114.123","5.15.0-1116.125","5.15.0-1117.126","5.15.0-1118.127","5.15.0-1119.128","5.15.0-1120.129","5.15.0-1121.130","5.15.0-1122.131","5.15.0-1124.133"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1041.48~22.04.1","6.8.0-1042.49~22.04.1","6.8.0-1044.51~22.04.1","6.8.0-1046.53~22.04.1","6.8.0-1053.60~22.04.1","6.8.0-1058.65~22.04.1","6.8.0-1061.68~22.04.1","6.8.0-1062.69~22.04.1","6.8.0-1063.70~22.04.1","6.8.0-1064.71~22.04.1","6.8.0-1065.72~22.04.1","6.8.0-1066.73~22.04.1","6.8.0-1068.75~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47","5.15.0-1040.48","5.15.0-1041.49","5.15.0-1042.50","5.15.0-1044.52","5.15.0-1045.53","5.15.0-1046.54","5.15.0-1047.55","5.15.0-1048.56","5.15.0-1049.57","5.15.0-1051.59","5.15.0-1052.60","5.15.0-1053.61","5.15.0-1054.62","5.15.0-1055.63","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.83","5.15.0-1075.84","5.15.0-1077.86","5.15.0-1078.87","5.15.0-1079.88","5.15.0-1080.89","5.15.0-1081.90","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1101.110","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1106.115","5.15.0-1108.117","5.15.0-1109.118","5.15.0-1111.121","5.15.0-1112.122","5.15.0-1114.124","5.15.0-1115.125","5.15.0-1117.127","5.15.0-1118.128","5.15.0-1120.130","5.15.0-1121.131"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10~22.04.3","6.5.0-1011.11~22.04.1","6.5.0-1013.13~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1022.24~22.04.1","6.5.0-1023.25~22.04.1","6.5.0-1024.26~22.04.1","6.5.0-1025.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1024.26~22.04.1","6.8.0-1025.27~22.04.1","6.8.0-1026.28~22.04.1","6.8.0-1027.29~22.04.1","6.8.0-1028.30~22.04.1","6.8.0-1029.31~22.04.1","6.8.0-1030.32~22.04.1","6.8.0-1031.33~22.04.1","6.8.0-1032.34~22.04.1","6.8.0-1033.35~22.04.1","6.8.0-1034.36~22.04.2","6.8.0-1036.38~22.04.1","6.8.0-1037.39~22.04.1","6.8.0-1040.42~22.04.1","6.8.0-1041.43~22.04.1","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.2","6.8.0-1048.51~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1053.56~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1063.69~22.04.1","6.8.0-1064.72~22.04.1","6.8.0-1065.73~22.04.1","6.8.0-1066.74~22.04.1","6.8.0-1067.75~22.04.1","6.8.0-1069.77~22.04.1","6.8.0-1070.78~22.04.1","6.8.0-1073.81~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1104.110","5.15.0-1105.111","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119","5.15.0-1115.121","5.15.0-1116.122"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.37","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.50","5.15.0-1044.51","5.15.0-1045.52","5.15.0-1046.53","5.15.0-1047.54","5.15.0-1048.55","5.15.0-1049.56","5.15.0-1050.57","5.15.0-1051.58","5.15.0-1052.59","5.15.0-1053.60","5.15.0-1054.61","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1059.67","5.15.0-1060.68","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.90","5.15.0-1083.91","5.15.0-1084.92","5.15.0-1086.94","5.15.0-1087.95","5.15.0-1088.96","5.15.0-1089.97","5.15.0-1091.99","5.15.0-1092.100","5.15.0-1094.102","5.15.0-1095.103","5.15.0-1096.104","5.15.0-1097.105","5.15.0-1098.106","5.15.0-1099.107","5.15.0-1100.108","5.15.0-1102.110","5.15.0-1103.111"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14~22.04.1","6.5.0-15.15~22.04.1","6.5.0-17.17~22.04.1","6.5.0-18.18~22.04.1","6.5.0-21.21~22.04.1","6.5.0-25.25~22.04.1","6.5.0-26.26~22.04.1","6.5.0-27.28~22.04.1","6.5.0-28.29~22.04.1","6.5.0-35.35~22.04.1","6.5.0-41.41~22.04.2","6.5.0-44.44~22.04.1","6.5.0-45.45~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1","6.8.0-57.59~22.04.1","6.8.0-58.60~22.04.1","6.8.0-59.61~22.04.1","6.8.0-60.63~22.04.1","6.8.0-64.67~22.04.1","6.8.0-65.68~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-85.85~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.2","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1","6.8.0-136.136~22.04.1","6.8.0-138.138~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1056.59","5.15.0-1057.60","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1068.71","5.15.0-1069.72","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1081.84","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1094.97","5.15.0-1095.98","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.109","5.15.0-1106.110","5.15.0-1107.111","5.15.0-1108.112","5.15.0-1109.113","5.15.0-1110.114","5.15.0-1111.115","5.15.0-1113.117"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.16~22.04.1","6.8.0-1017.17~22.04.1","6.8.0-1018.18~22.04.1","6.8.0-1019.19~22.04.1","6.8.0-1023.23~22.04.1","6.8.0-1024.24~22.04.1","6.8.0-1025.25~22.04.1","6.8.0-1026.26~22.04.1","6.8.0-1027.27~22.04.1","6.8.0-1028.28~22.04.1","6.8.0-1029.29~22.04.1","6.8.0-1030.30~22.04.1","6.8.0-1033.33~22.04.1","6.8.0-1036.36~22.04.1","6.8.0-1037.37~22.04.1","6.8.0-1038.38~22.04.1","6.8.0-1039.39~22.04.1","6.8.0-1040.40~22.04.1","6.8.0-1041.41~22.04.1","6.8.0-1042.42~22.04.1","6.8.0-1043.43~22.04.1","6.8.0-1044.44~22.04.1","6.8.0-1045.45~22.04.1","6.8.0-1049.49~22.04.1","6.8.0-1050.50~22.04.1","6.8.0-1051.51~22.04.1","6.8.0-1052.52~22.04.1","6.8.0-1055.56~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1060.61~22.04.1","6.8.0-1061.62~22.04.1","6.8.0-1062.63~22.04.1","6.8.0-1063.64~22.04.1","6.8.0-1066.67~22.04.1","6.8.0-1069.70~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1043.49","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1055.61","5.15.0-1057.63","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1087.93","5.15.0-1088.94","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1098.104","5.15.0-1099.105","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1103.109","5.15.0-1104.110","5.15.0-1106.112","5.15.0-1107.113","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1114.120"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.51","5.15.0-1047.52","5.15.0-1048.53","5.15.0-1049.54","5.15.0-1050.55","5.15.0-1051.56","5.15.0-1052.57","5.15.0-1053.58","5.15.0-1054.59","5.15.0-1057.62","5.15.0-1058.63","5.15.0-1059.64","5.15.0-1060.65","5.15.0-1061.66","5.15.0-1062.67","5.15.0-1063.68","5.15.0-1064.69","5.15.0-1065.70","5.15.0-1066.71","5.15.0-1067.72","5.15.0-1068.73","5.15.0-1069.74","5.15.0-1070.75","5.15.0-1071.76","5.15.0-1072.77","5.15.0-1073.78","5.15.0-1076.81","5.15.0-1077.82","5.15.0-1078.83","5.15.0-1079.84","5.15.0-1080.85","5.15.0-1081.86","5.15.0-1082.87","5.15.0-1083.88","5.15.0-1084.89","5.15.0-1085.90","5.15.0-1086.91","5.15.0-1087.92","5.15.0-1088.93","5.15.0-1089.94","5.15.0-1090.95","5.15.0-1091.96","5.15.0-1092.97","5.15.0-1093.98","5.15.0-1095.100","5.15.0-1096.101","5.15.0-1097.102","5.15.0-1098.103","5.15.0-1100.105","5.15.0-1101.106","5.15.0-1103.108","5.15.0-1104.109","5.15.0-1105.110","5.15.0-1106.111","5.15.0-1107.112","5.15.0-1108.113","5.15.0-1109.114","5.15.0-1111.116","5.15.0-1112.117"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88","5.15.0-82.91","5.15.0-83.92","5.15.0-84.93","5.15.0-86.95","5.15.0-87.96","5.15.0-88.98","5.15.0-89.99","5.15.0-91.101","5.15.0-92.102","5.15.0-94.104","5.15.0-97.107","5.15.0-100.110","5.15.0-101.111","5.15.0-102.112","5.15.0-105.115","5.15.0-106.116","5.15.0-107.117","5.15.0-110.120","5.15.0-113.123","5.15.0-116.126","5.15.0-117.127","5.15.0-118.128","5.15.0-119.129","5.15.0-121.131","5.15.0-122.132","5.15.0-124.134","5.15.0-125.135","5.15.0-126.136","5.15.0-127.137","5.15.0-128.138","5.15.0-129.139","5.15.0-131.141","5.15.0-133.143","5.15.0-134.145","5.15.0-135.146","5.15.0-136.147","5.15.0-138.148","5.15.0-139.149","5.15.0-140.150","5.15.0-141.151","5.15.0-142.152","5.15.0-143.153","5.15.0-144.157","5.15.0-145.158","5.15.0-152.162","5.15.0-153.163","5.15.0-156.166","5.15.0-157.167","5.15.0-160.170","5.15.0-161.171","5.15.0-163.173","5.15.0-164.174","5.15.0-168.178","5.15.0-170.180","5.15.0-171.181","5.15.0-173.183","5.15.0-174.184","5.15.0-175.185","5.15.0-177.187","5.15.0-178.188","5.15.0-179.189","5.15.0-181.191","5.15.0-183.193","5.15.0-184.194","5.15.0-190.200","5.15.0-191.201","5.15.0-194.204","5.15.0-195.205","5.15.0-197.207","5.15.0-198.208"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14.1~22.04.1","6.5.0-15.15.1.1~22.04.1","6.5.0-17.17.1.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-41.41.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-44.44.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-54.56.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-60.63.1~22.04.1","6.8.0-62.65.1~22.04.1","6.8.0-63.66.1~22.04.1","6.8.0-64.67.1~22.04.1","6.8.0-65.68.1~22.04.1","6.8.0-78.78.1~22.04.1","6.8.0-79.79.1~22.04.1","6.8.0-83.83.1~22.04.1","6.8.0-84.84.1~22.04.1","6.8.0-85.85.1~22.04.1","6.8.0-86.87.1~22.04.1","6.8.0-87.88.1~22.04.1","6.8.0-88.89.1~22.04.1","6.8.0-90.91.1~22.04.1","6.8.0-94.96.1~22.04.1","6.8.0-100.100.1~22.04.1","6.8.0-101.101.1~22.04.1","6.8.0-106.106.1~22.04.1","6.8.0-107.107.1~22.04.1","6.8.0-110.110.1~22.04.1","6.8.0-111.111.1~22.04.1","6.8.0-117.117.1~22.04.1","6.8.0-134.134.1~22.04.1","6.8.0-136.136.2~22.04.1","6.8.0-137.137.1~22.04.1","6.8.0-138.138.1~22.04.1","6.8.0-139.139.1~22.04.1","6.8.0-142.142.1~22.04.1","6.8.0-146.146.1~22.04.1","6.8.0-149.149.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1037.37","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1053.54","5.15.0-1054.55","5.15.0-1055.56","5.15.0-1058.59","5.15.0-1059.60","5.15.0-1060.61","5.15.0-1061.62","5.15.0-1062.63","5.15.0-1063.64","5.15.0-1064.65","5.15.0-1065.66","5.15.0-1066.67","5.15.0-1067.68","5.15.0-1068.69","5.15.0-1069.70","5.15.0-1070.71","5.15.0-1071.72","5.15.0-1072.73","5.15.0-1073.74","5.15.0-1074.75","5.15.0-1075.76","5.15.0-1076.77","5.15.0-1077.78","5.15.0-1078.79","5.15.0-1079.80","5.15.0-1080.81","5.15.0-1081.82","5.15.0-1082.83","5.15.0-1083.84","5.15.0-1085.86","5.15.0-1086.87","5.15.0-1087.88","5.15.0-1088.89","5.15.0-1090.91","5.15.0-1091.92","5.15.0-1092.93","5.15.0-1093.94","5.15.0-1094.95","5.15.0-1095.96","5.15.0-1096.97","5.15.0-1098.99","5.15.0-1099.100","5.15.0-1100.101","5.15.0-1101.102","5.15.0-1103.104","5.15.0-1104.105","5.15.0-1106.107","5.15.0-1107.108","5.15.0-1108.109","5.15.0-1109.110","5.15.0-1110.111","5.15.0-1111.112","5.15.0-1112.113","5.15.0-1114.115","5.15.0-1115.116"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1004.4","6.5.0-1007.7","6.5.0-1013.13","6.5.0-1014.14","6.5.0-1015.15","6.5.0-1018.18","6.5.0-1019.19","6.5.0-1021.22","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1","6.8.0-1022.25~22.04.2","6.8.0-1023.26~22.04.1","6.8.0-1024.27~22.04.1","6.8.0-1025.28~22.04.1","6.8.0-1026.29~22.04.1","6.8.0-1027.30~22.04.1","6.8.0-1028.31~22.04.1","6.8.0-1029.32~22.04.1","6.8.0-1030.33~22.04.1","6.8.0-1031.34~22.04.1","6.8.0-1032.35~22.04.1","6.8.0-1035.38~22.04.1","6.8.0-1036.39~22.04.1","6.8.0-1038.41~22.04.1","6.8.0-1039.42~22.04.1","6.8.0-1040.43~22.04.1","6.8.0-1041.44~22.04.2","6.8.0-1042.45~22.04.1","6.8.0-1043.46~22.04.1","6.8.0-1044.47~22.04.1","6.8.0-1045.48~22.04.1","6.8.0-1046.49~22.04.1","6.8.0-1047.50~22.04.1","6.8.0-1049.52~22.04.1","6.8.0-1050.53~22.04.1","6.8.0-1051.54~22.04.1","6.8.0-1052.55~22.04.1","6.8.0-1054.57~22.04.1","6.8.0-1055.58~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1059.62~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.1","6.8.0-1063.66~22.04.1","6.8.0-1064.67~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1009.9","5.15.0-1010.10","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1030.30","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1043.43","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1048.48","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1051.51","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1058.58","5.15.0-1060.60","5.15.0-1061.61","5.15.0-1063.63","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1068.70","5.15.0-1070.72"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1001.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1009.9","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1018.18","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1023.23","5.15.0-1024.24","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30","5.15.0-1031.31","5.15.0-1032.32","5.15.0-1033.33","5.15.0-1034.34","5.15.0-1035.35","5.15.0-1036.36","5.15.0-1037.37","5.15.0-1038.38","5.15.0-1039.39","5.15.0-1040.40","5.15.0-1041.41","5.15.0-1042.42","5.15.0-1044.44","5.15.0-1045.45","5.15.0-1046.46","5.15.0-1047.47","5.15.0-1049.49","5.15.0-1050.50","5.15.0-1052.52","5.15.0-1053.53","5.15.0-1054.54","5.15.0-1055.55","5.15.0-1056.56","5.15.0-1057.57","5.15.0-1059.59"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1003.3","6.5.0-1004.4","6.5.0-1006.6","6.5.0-1007.7","6.5.0-1008.8","6.5.0-1009.10","6.5.0-1011.12","6.5.0-1013.14","6.5.0-1014.15","6.5.0-1015.16","6.5.0-1016.17","6.5.0-1018.19","6.5.0-1019.20","6.5.0-1020.21","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25","6.5.0-1025.26","6.5.0-1027.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46","5.15.0-1041.47","5.15.0-1042.48","5.15.0-1044.50","5.15.0-1045.51","5.15.0-1046.52","5.15.0-1047.53","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.61","5.15.0-1058.64","5.15.0-1059.65","5.15.0-1060.66","5.15.0-1061.67","5.15.0-1062.68","5.15.0-1063.69","5.15.0-1064.70","5.15.0-1065.71","5.15.0-1066.72","5.15.0-1067.73","5.15.0-1068.74","5.15.0-1069.75","5.15.0-1070.76","5.15.0-1071.77","5.15.0-1072.78","5.15.0-1073.79","5.15.0-1074.80","5.15.0-1075.81","5.15.0-1076.82","5.15.0-1077.83","5.15.0-1078.84","5.15.0-1079.85","5.15.0-1080.86","5.15.0-1081.87","5.15.0-1082.88","5.15.0-1083.89","5.15.0-1084.90","5.15.0-1085.91","5.15.0-1086.92","5.15.0-1088.94","5.15.0-1089.95","5.15.0-1090.96","5.15.0-1091.97","5.15.0-1092.98","5.15.0-1093.99","5.15.0-1094.100","5.15.0-1095.101","5.15.0-1096.102","5.15.0-1097.103","5.15.0-1098.104","5.15.0-1100.106","5.15.0-1101.107","5.15.0-1102.108","5.15.0-1103.109","5.15.0-1105.111","5.15.0-1106.112","5.15.0-1108.114","5.15.0-1109.115","5.15.0-1110.116","5.15.0-1111.117","5.15.0-1112.118","5.15.0-1113.119","5.15.0-1114.120","5.15.0-1116.122"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1013.13~22.04.4","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1019.19~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1","6.5.0-1025.25~22.04.1","6.5.0-1026.26~22.04.1","6.5.0-1027.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1","6.8.0-1020.21~22.04.1","6.8.0-1021.22~22.04.1","6.8.0-1022.23~22.04.1","6.8.0-1023.24~22.04.1","6.8.0-1024.25~22.04.1","6.8.0-1025.26~22.04.1","6.8.0-1026.27~22.04.1","6.8.0-1027.28~22.04.1","6.8.0-1028.29~22.04.1","6.8.0-1029.30~22.04.1","6.8.0-1030.31~22.04.1","6.8.0-1032.33~22.04.1","6.8.0-1033.34~22.04.1","6.8.0-1035.36~22.04.1","6.8.0-1037.38~22.04.1","6.8.0-1038.39~22.04.1","6.8.0-1039.40~22.04.1","6.8.0-1040.41~22.04.1","6.8.0-1041.42~22.04.1","6.8.0-1042.43~22.04.1","6.8.0-1043.44~22.04.1","6.8.0-1044.45~22.04.1","6.8.0-1047.48~22.04.1","6.8.0-1049.50~22.04.1","6.8.0-1050.51~22.04.1","6.8.0-1052.53~22.04.1","6.8.0-1054.55~22.04.1","6.8.0-1057.58~22.04.1","6.8.0-1058.61~22.04.1","6.8.0-1059.62~22.04.1","6.8.0-1060.63~22.04.1","6.8.0-1061.64~22.04.1","6.8.0-1062.65~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1040.43","5.15.0-1041.44","5.15.0-1042.45","5.15.0-1043.46","5.15.0-1044.47","5.15.0-1045.48","5.15.0-1046.49","5.15.0-1047.50","5.15.0-1048.51","5.15.0-1049.52","5.15.0-1050.53","5.15.0-1053.56","5.15.0-1054.57","5.15.0-1055.58","5.15.0-1058.61","5.15.0-1059.62","5.15.0-1060.63","5.15.0-1061.64","5.15.0-1062.65","5.15.0-1063.66","5.15.0-1064.67","5.15.0-1065.68","5.15.0-1066.69","5.15.0-1067.70","5.15.0-1070.73","5.15.0-1071.74","5.15.0-1072.75","5.15.0-1073.76","5.15.0-1074.77","5.15.0-1075.78","5.15.0-1076.79","5.15.0-1077.80","5.15.0-1078.81","5.15.0-1079.82","5.15.0-1080.83","5.15.0-1083.86","5.15.0-1084.87","5.15.0-1085.88","5.15.0-1086.89","5.15.0-1087.90","5.15.0-1089.92","5.15.0-1090.93","5.15.0-1091.94","5.15.0-1092.95","5.15.0-1093.96","5.15.0-1097.100","5.15.0-1098.101","5.15.0-1099.102","5.15.0-1100.103","5.15.0-1102.105","5.15.0-1103.106","5.15.0-1105.108","5.15.0-1106.109","5.15.0-1108.111","5.15.0-1110.113"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-17.17.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-40.40.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38.1~22.04.1","6.8.0-39.39.1~22.04.1","6.8.0-40.40.1~22.04.1","6.8.0-41.41.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.1~22.04.2","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1","6.8.0-53.55.1~22.04.1","6.8.0-55.57.1~22.04.1","6.8.0-56.58.1~22.04.1","6.8.0-57.59.1~22.04.1","6.8.0-58.60.1~22.04.1","6.8.0-59.61.1~22.04.1","6.8.0-62.65~22.04.1","6.8.0-63.66~22.04.1","6.8.0-64.67~22.04.1","6.8.0-71.71~22.04.1","6.8.0-78.78~22.04.1","6.8.0-79.79~22.04.1","6.8.0-83.83~22.04.1","6.8.0-84.84~22.04.1","6.8.0-86.87~22.04.1","6.8.0-87.88~22.04.1","6.8.0-88.89~22.04.1","6.8.0-90.91~22.04.1","6.8.0-94.96~22.04.1","6.8.0-100.100~22.04.1","6.8.0-101.101~22.04.1","6.8.0-106.106~22.04.1","6.8.0-107.107~22.04.1","6.8.0-110.110~22.04.1","6.8.0-111.111~22.04.1","6.8.0-117.117~22.04.1","6.8.0-124.124~22.04.1","6.8.0-134.134~22.04.1","6.8.0-136.136~22.04.3","6.8.0-137.137~22.04.1","6.8.0-138.138~22.04.1","6.8.0-139.139~22.04.1","6.8.0-142.142~22.04.1","6.8.0-146.146~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.8~22.04.1","6.5.0-1008.9~22.04.1","6.5.0-1009.10~22.04.1","6.5.0-1010.11~22.04.1","6.5.0-1011.12~22.04.1","6.5.0-1012.13~22.04.1","6.5.0-1014.15~22.04.1","6.5.0-1015.16~22.04.1","6.5.0-1016.17~22.04.1","6.5.0-1017.18~22.04.1","6.5.0-1018.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1022.26","5.15.0-1023.27","5.15.0-1025.29","5.15.0-1027.31","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.42","5.15.0-1039.43","5.15.0-1041.45","5.15.0-1044.48","5.15.0-1046.50","5.15.0-1050.54","5.15.0-1051.55","5.15.0-1052.56","5.15.0-1053.57","5.15.0-1054.58","5.15.0-1055.59","5.15.0-1056.60","5.15.0-1057.61","5.15.0-1059.63","5.15.0-1060.64","5.15.0-1061.65","5.15.0-1062.66","5.15.0-1063.67","5.15.0-1064.68","5.15.0-1065.69","5.15.0-1067.71","5.15.0-1068.72","5.15.0-1069.73","5.15.0-1070.74","5.15.0-1074.78","5.15.0-1075.79","5.15.0-1076.80","5.15.0-1077.81","5.15.0-1078.82","5.15.0-1079.83","5.15.0-1080.84"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1017.19","5.15.0-1019.21","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1031.33","5.15.0-1032.34","5.15.0-1033.35","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1040.42","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1045.47","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1050.52","5.15.0-1051.53","5.15.0-1052.54","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1062.64","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1065.67","5.15.0-1066.68","5.15.0-1067.69","5.15.0-1069.71","5.15.0-1070.72","5.15.0-1072.74","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1095.97","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1039.41","5.15.0-1040.42","5.15.0-1041.43","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1046.48","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1049.51","5.15.0-1050.52","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1055.57","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1066.68","5.15.0-1071.73","5.15.0-1072.74","5.15.0-1073.75","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1078.80","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1088.90","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1091.93","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1094.96","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101","5.15.0-1100.102","5.15.0-1101.103","5.15.0-1103.105","5.15.0-1104.106","5.15.0-1105.107","5.15.0-1106.108","5.15.0-1107.109","5.15.0-1108.110","5.15.0-1109.111","5.15.0-1111.115","5.15.0-1112.116"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25","5.15.0-1025.28","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1039.42","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1043.48","5.15.0-1044.49","5.15.0-1045.50","5.15.0-1046.52","5.15.0-1048.54","5.15.0-1049.55","5.15.0-1050.56","5.15.0-1051.57","5.15.0-1052.58","5.15.0-1053.59","5.15.0-1054.60","5.15.0-1055.62","5.15.0-1056.63","5.15.0-1057.64","5.15.0-1058.66","5.15.0-1061.69","5.15.0-1062.70","5.15.0-1063.71","5.15.0-1064.72","5.15.0-1065.73","5.15.0-1066.74","5.15.0-1067.75","5.15.0-1068.76","5.15.0-1069.77","5.15.0-1070.78","5.15.0-1071.79","5.15.0-1072.80","5.15.0-1073.81","5.15.0-1074.82","5.15.0-1075.83","5.15.0-1076.84","5.15.0-1077.85","5.15.0-1078.86","5.15.0-1079.87","5.15.0-1080.88","5.15.0-1081.89","5.15.0-1082.91","5.15.0-1083.92","5.15.0-1084.93","5.15.0-1085.94","5.15.0-1086.95","5.15.0-1087.96","5.15.0-1088.97","5.15.0-1089.98","5.15.0-1090.99","5.15.0-1091.100","5.15.0-1092.101","5.15.0-1093.102","5.15.0-1094.103","5.15.0-1095.104","5.15.0-1096.105","5.15.0-1097.106","5.15.0-1098.107","5.15.0-1099.108","5.15.0-1100.109","5.15.0-1102.111","5.15.0-1103.112","5.15.0-1104.113","5.15.0-1105.114","5.15.0-1107.116","5.15.0-1108.117","5.15.0-1110.119","5.15.0-1111.120","5.15.0-1112.121","5.15.0-1113.122","5.15.0-1114.123","5.15.0-1115.124","5.15.0-1116.125","5.15.0-1118.127","5.15.0-1119.128"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1004.4~22.04.1","6.8.1-1005.5~22.04.2","6.8.1-1006.6~22.04.1","6.8.1-1007.7~22.04.1","6.8.1-1008.8~22.04.1","6.8.1-1009.9~22.04.1","6.8.1-1010.10~22.04.1","6.8.1-1011.11~22.04.1","6.8.1-1012.12~22.04.1","6.8.1-1013.14~22.04.1","6.8.1-1014.15~22.04.1","6.8.1-1015.16~22.04.1","6.8.1-1016.17~22.04.1","6.8.1-1017.18~22.04.1","6.8.1-1018.19~22.04.1","6.8.1-1019.20~22.04.1","6.8.1-1020.21~22.04.1","6.8.1-1021.22~22.04.1","6.8.1-1022.23~22.04.1","6.8.1-1023.24~22.04.1","6.8.1-1024.25~22.04.1","6.8.1-1025.26~22.04.1","6.8.1-1026.27~22.04.1","6.8.1-1030.31~22.04.1","6.8.1-1031.32~22.04.1","6.8.1-1034.35~22.04.1","6.8.1-1035.36~22.04.1","6.8.1-1036.37~22.04.1","6.8.1-1037.38~22.04.1","6.8.1-1038.39~22.04.1","6.8.1-1039.40~22.04.1","6.8.1-1040.41~22.04.1","6.8.1-1041.42~22.04.1","6.8.1-1042.43~22.04.1","6.8.1-1045.46~22.04.1","6.8.1-1046.47~22.04.2","6.8.1-1047.48~22.04.1","6.8.1-1048.49~22.04.1","6.8.1-1051.52~22.04.1","6.8.1-1052.53~22.04.1","6.8.1-1055.56~22.04.1","6.8.1-1056.57~22.04.2","6.8.1-1057.58~22.04.1","6.8.1-1058.59~22.04.1","6.8.1-1059.60~22.04.1","6.8.1-1060.61~22.04.1","6.8.1-1061.62~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1042.47+fips1","5.15.0-1051.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1051.56+fips1","5.15.0-1052.57+fips1","5.15.0-1053.58+fips1","5.15.0-1055.60+fips1","5.15.0-1056.61+fips1","5.15.0-1057.63+fips1","5.15.0-1060.66+fips1","5.15.0-1061.67+fips1","5.15.0-1062.68+fips1","5.15.0-1063.69+fips1","5.15.0-1064.70+fips1","5.15.0-1065.71+fips1","5.15.0-1066.72+fips1","5.15.0-1067.73+fips1","5.15.0-1068.74+fips1","5.15.0-1069.75+fips1","5.15.0-1070.76+fips1","5.15.0-1071.77+fips1","5.15.0-1072.78+fips1","5.15.0-1073.79+fips1","5.15.0-1076.83+fips1","5.15.0-1077.84+fips1","5.15.0-1078.85+fips1","5.15.0-1079.86+fips1","5.15.0-1080.87+fips1","5.15.0-1081.88+fips1","5.15.0-1082.89+fips1","5.15.0-1083.90+fips1","5.15.0-1084.91+fips1","5.15.0-1085.92+fips1","5.15.0-1086.93+fips1","5.15.0-1087.94+fips1","5.15.0-1088.95+fips1","5.15.0-1089.96+fips1","5.15.0-1090.97+fips1","5.15.0-1091.98+fips1","5.15.0-1092.99+fips1","5.15.0-1093.100+fips1","5.15.0-1095.102+fips1","5.15.0-1096.103+fips1","5.15.0-1097.104+fips1","5.15.0-1098.105+fips1","5.15.0-1099.106+fips1","5.15.0-1100.107+fips1","5.15.0-1101.108+fips1","5.15.0-1103.110+fips1","5.15.0-1104.111+fips1","5.15.0-1105.112+fips1","5.15.0-1106.113+fips1","5.15.0-1108.115+fips1","5.15.0-1109.116+fips1","5.15.0-1111.118+fips1","5.15.0-1112.119+fips1","5.15.0-1113.120+fips1","5.15.0-1114.121+fips1","5.15.0-1115.122+fips1","5.15.0-1116.123+fips1","5.15.0-1117.124+fips1","5.15.0-1119.126+fips1","5.15.0-1120.127+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1053.61+fips1","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.69+fips1","5.15.0-1061.70+fips1","5.15.0-1063.72+fips1","5.15.0-1064.73+fips1","5.15.0-1065.74+fips1","5.15.0-1067.76+fips1","5.15.0-1068.77+fips1","5.15.0-1070.79+fips1","5.15.0-1071.80+fips1","5.15.0-1072.81+fips1","5.15.0-1073.82+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1085.94+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1089.98+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1094.103+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1101.110+fips1","5.15.0-1102.111+fips1","5.15.0-1103.112+fips1","5.15.0-1109.118+fips1","5.15.0-1110.119+fips1","5.15.0-1111.120+fips1","5.15.0-1114.123+fips1","5.15.0-1116.125+fips1","5.15.0-1117.126+fips1","5.15.0-1118.127+fips1","5.15.0-1119.128+fips1","5.15.0-1121.130+fips1","5.15.0-1122.131+fips1","5.15.0-1123.132+fips1","5.15.0-1125.134+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1","5.15.0-92.102+fips1","5.15.0-94.104+fips1","5.15.0-97.107+fips1","5.15.0-100.110+fips1","5.15.0-101.111+fips1","5.15.0-102.112+fips1","5.15.0-105.115+fips1","5.15.0-106.116+fips1","5.15.0-107.117+fips1","5.15.0-111.121+fips1","5.15.0-113.123+fips1","5.15.0-115.125+fips1","5.15.0-117.127+fips1","5.15.0-118.128+fips1","5.15.0-119.129+fips1","5.15.0-121.131+fips1","5.15.0-122.132+fips1","5.15.0-124.134+fips1","5.15.0-125.135+fips1","5.15.0-127.137+fips1","5.15.0-128.138+fips1","5.15.0-130.140+fips1","5.15.0-131.141+fips1","5.15.0-133.144+fips1","5.15.0-134.145+fips1","5.15.0-135.146+fips1","5.15.0-136.147+fips1","5.15.0-138.148+fips1","5.15.0-139.149+fips1","5.15.0-140.150+fips1","5.15.0-141.151+fips1","5.15.0-142.152+fips1","5.15.0-143.153+fips1","5.15.0-144.157+fips1","5.15.0-145.158+fips1","5.15.0-152.162+fips1","5.15.0-153.163+fips1","5.15.0-156.166+fips1","5.15.0-157.167+fips1","5.15.0-160.170+fips1","5.15.0-161.171+fips1","5.15.0-163.173+fips1","5.15.0-164.174+fips1","5.15.0-168.178+fips1","5.15.0-170.180+fips1","5.15.0-171.181+fips1","5.15.0-173.183+fips1","5.15.0-174.184+fips1","5.15.0-176.186+fips1","5.15.0-177.187+fips1","5.15.0-179.189+fips1","5.15.0-181.191+fips1","5.15.0-185.195+fips1","5.15.0-186.196+fips1","5.15.0-190.200+fips1","5.15.0-191.201+fips1","5.15.0-194.204+fips1","5.15.0-198.208+fips1","5.15.0-202.212+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1048.56+fips1","5.15.0-1055.63+fips2","5.15.0-1058.66+fips1","5.15.0-1059.67+fips1","5.15.0-1060.68+fips1","5.15.0-1062.70+fips1","5.15.0-1063.71+fips1","5.15.0-1064.72+fips1","5.15.0-1065.73+fips1","5.15.0-1066.74+fips1","5.15.0-1067.75+fips1","5.15.0-1068.76+fips1","5.15.0-1069.77+fips1","5.15.0-1070.78+fips1","5.15.0-1071.79+fips1","5.15.0-1072.80+fips1","5.15.0-1073.81+fips1","5.15.0-1074.83+fips1","5.15.0-1075.84+fips1","5.15.0-1077.86+fips1","5.15.0-1078.87+fips1","5.15.0-1079.88+fips1","5.15.0-1080.89+fips1","5.15.0-1081.90+fips1","5.15.0-1082.91+fips1","5.15.0-1083.92+fips1","5.15.0-1084.93+fips1","5.15.0-1085.94+fips1","5.15.0-1086.95+fips1","5.15.0-1087.96+fips1","5.15.0-1088.97+fips1","5.15.0-1090.99+fips1","5.15.0-1091.100+fips1","5.15.0-1092.101+fips1","5.15.0-1093.102+fips1","5.15.0-1095.104+fips1","5.15.0-1096.105+fips1","5.15.0-1097.106+fips1","5.15.0-1098.107+fips1","5.15.0-1099.108+fips1","5.15.0-1100.109+fips1","5.15.0-1101.110+fips1","5.15.0-1103.112+fips1","5.15.0-1104.113+fips1","5.15.0-1105.114+fips1","5.15.0-1106.115+fips1","5.15.0-1108.117+fips1","5.15.0-1109.118+fips1","5.15.0-1111.121+fips1","5.15.0-1112.122+fips1","5.15.0-1114.124+fips1","5.15.0-1115.125+fips1","5.15.0-1116.126+fips1","5.15.0-1118.128+fips1","5.15.0-1120.130+fips1","5.15.0-1121.131+fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55","6.8.0-54.56","6.8.0-55.57","6.8.0-56.58","6.8.0-57.59","6.8.0-58.60","6.8.0-59.61","6.8.0-60.63","6.8.0-62.65","6.8.0-63.66","6.8.0-64.67","6.8.0-71.71","6.8.0-78.78","6.8.0-79.79","6.8.0-83.83","6.8.0-84.84","6.8.0-85.85","6.8.0-86.87","6.8.0-87.88","6.8.0-88.89","6.8.0-90.91","6.8.0-94.96","6.8.0-100.100","6.8.0-101.101","6.8.0-106.106","6.8.0-107.107","6.8.0-110.110","6.8.0-111.111","6.8.0-117.117","6.8.0-124.124","6.8.0-134.134","6.8.0-136.136","6.8.0-137.137","6.8.0-138.138","6.8.0-139.139","6.8.0-142.142","6.8.0-146.146","6.8.0-147.147","6.8.0-149.149"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1035.37","6.8.0-1036.38","6.8.0-1038.40","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.44","6.8.0-1043.45","6.8.0-1044.46","6.8.0-1045.47","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1055.58","6.8.0-1057.60","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67","6.8.0-1065.68","6.8.0-1066.69","6.8.0-1067.70","6.8.0-1069.74"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.2","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1019.19~24.04.1","6.17.0-1020.20~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1007.7~24.04.2","7.0.0-1009.9~24.04.1","7.0.0-1010.10~24.04.1","7.0.0-1011.11~24.04.1","7.0.0-1012.12~24.04.1","7.0.0-1013.13~24.04.1","7.0.0-1014.14~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25","6.8.0-1025.30","6.8.0-1026.31","6.8.0-1027.32","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1034.39","6.8.0-1038.44","6.8.0-1040.46","6.8.0-1041.47","6.8.0-1042.48","6.8.0-1044.50","6.8.0-1046.52","6.8.0-1051.57","6.8.0-1052.58","6.8.0-1054.60","6.8.0-1056.62","6.8.0-1058.64","6.8.0-1059.65","6.8.0-1062.69","6.8.0-1063.71","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1067.75","6.8.0-1068.76","6.8.0-1070.78","6.8.0-1071.79"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1010.10~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1008.8~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.2","6.17.0-1013.13~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1020.20~24.04.1","6.17.0-1021.21~24.04.1","6.17.0-1022.22"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1008.8~24.04.2","7.0.0-1014.14~24.04.1","7.0.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1041.48","6.8.0-1044.51","6.8.0-1046.53","6.8.0-1053.60","6.8.0-1058.65","6.8.0-1061.68","6.8.0-1062.69","6.8.0-1063.70","6.8.0-1064.71","6.8.0-1065.72","6.8.0-1066.73","6.8.0-1068.75","6.8.0-1069.76"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1015.15~24.04.1","6.17.0-1017.17~24.04.1","6.17.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-fde-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1007.7~24.04.3","7.0.0-1013.13~24.04.1","7.0.0-1016.16~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1013.14","6.8.0-1014.15","6.8.0-1016.17","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1022.23","6.8.0-1025.27","6.8.0-1027.30","6.8.0-1029.32","6.8.0-1039.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-nvidia-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3","6.14.0-1006.6","6.14.0-1007.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1024.26","6.8.0-1025.27","6.8.0-1026.28","6.8.0-1027.29","6.8.0-1028.30","6.8.0-1029.31","6.8.0-1030.32","6.8.0-1031.33","6.8.0-1032.34","6.8.0-1033.35","6.8.0-1034.36","6.8.0-1036.38","6.8.0-1037.39","6.8.0-1039.41","6.8.0-1040.42","6.8.0-1041.43","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1048.51","6.8.0-1052.55","6.8.0-1053.56","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1060.63","6.8.0-1063.69","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1066.74","6.8.0-1067.75","6.8.0-1069.77","6.8.0-1070.78","6.8.0-1071.79","6.8.0-1073.81"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1014.15~24.04.1","6.14.0-1015.16~24.04.1","6.14.0-1016.17~24.04.1","6.14.0-1017.18~24.04.1","6.14.0-1018.19~24.04.1","6.14.0-1019.20~24.04.1","6.14.0-1020.21~24.04.1","6.14.0-1021.22~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.3","6.17.0-1008.8~24.04.1","6.17.0-1009.9~24.04.3","6.17.0-1010.10~24.04.1","6.17.0-1012.12~24.04.1","6.17.0-1013.13~24.04.1","6.17.0-1016.17~24.04.1","6.17.0-1018.19~24.04.1","6.17.0-1020.22~24.04.1","6.17.0-1021.24~24.04.1","6.17.0-1022.25"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1006.6~24.04.2","7.0.0-1011.11~24.04.1","7.0.0-1013.13~24.04.1","7.0.0-1014.14~24.04.1","7.0.0-1017.19~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1021.25","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1024.28","6.8.0-1025.29","6.8.0-1026.30","6.8.0-1027.31","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1032.36","6.8.0-1033.37","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1037.41","6.8.0-1038.43","6.8.0-1039.44","6.8.0-1040.45","6.8.0-1041.46","6.8.0-1042.47","6.8.0-1043.48","6.8.0-1044.49","6.8.0-1048.53","6.8.0-1049.54","6.8.0-1050.56","6.8.0-1051.57","6.8.0-1054.60","6.8.0-1055.61","6.8.0-1058.64","6.8.0-1059.67","6.8.0-1060.68","6.8.0-1061.69","6.8.0-1062.70","6.8.0-1064.72","6.8.0-1065.73","6.8.0-1066.74"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6","6.8.0-1006.8","6.8.0-1007.9","6.8.0-1008.10","6.8.0-1009.11","6.8.0-1010.12","6.8.0-1011.13","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1022.24","6.8.0-1023.25","6.8.0-1024.26","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1037.40","6.8.0-1038.41","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1045.48","6.8.0-1046.50","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1049.53","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-24.24~24.04.3","6.14.0-27.27~24.04.1","6.14.0-28.28~24.04.1","6.14.0-29.29~24.04.1","6.14.0-32.32~24.04.1","6.14.0-33.33~24.04.1","6.14.0-34.34~24.04.1","6.14.0-35.35~24.04.1","6.14.0-36.36~24.04.1","6.14.0-37.37~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14~24.04.1","6.17.0-19.19~24.04.2","6.17.0-20.20~24.04.1","6.17.0-22.22~24.04.1","6.17.0-23.23~24.04.1","6.17.0-29.29~24.04.1","6.17.0-35.35~24.04.1","6.17.0-40.40~24.04.1","6.17.0-41.41~24.04.1","6.17.0-42.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-42.42~24.04.1"}]}],"versions":["7.0.0-14.14~24.04.3","7.0.0-28.28~24.04.1","7.0.0-29.29~24.04.2","7.0.0-30.30~24.04.1","7.0.0-31.31~24.04.1","7.0.0-34.34~24.04.1","7.0.0-38.38~24.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1033.33","6.8.0-1036.36","6.8.0-1037.37","6.8.0-1038.38","6.8.0-1039.39","6.8.0-1040.40","6.8.0-1041.41","6.8.0-1042.42","6.8.0-1043.43","6.8.0-1044.44","6.8.0-1045.45","6.8.0-1049.49","6.8.0-1050.50","6.8.0-1051.51","6.8.0-1052.52","6.8.0-1055.56","6.8.0-1057.58","6.8.0-1060.61","6.8.0-1061.62","6.8.0-1062.63","6.8.0-1063.64","6.8.0-1064.65","6.8.0-1065.66","6.8.0-1066.67","6.8.0-1067.68","6.8.0-1069.70"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2","6.8.0-54.56.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1","6.8.0-62.65.1","6.8.0-63.66.1","6.8.0-64.67.1","6.8.0-65.68.1","6.8.0-78.78.1","6.8.0-79.79.1","6.8.0-83.83.1","6.8.0-84.84.1","6.8.0-85.85.1","6.8.0-86.87.1","6.8.0-87.88.1","6.8.0-88.89.1","6.8.0-90.91.1","6.8.0-94.96.1","6.8.0-100.100.1","6.8.0-101.101.1","6.8.0-106.106.1","6.8.0-107.107.1","6.8.0-110.110.1","6.8.0-111.111.1","6.8.0-117.117.1","6.8.0-134.134.1","6.8.0-136.136.2","6.8.0-137.137.1","6.8.0-138.138.1","6.8.0-139.139.1","6.8.0-142.142.1","6.8.0-146.146.1","6.8.0-147.147.1","6.8.0-149.149.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23","6.8.0-1022.25","6.8.0-1023.26","6.8.0-1024.27","6.8.0-1025.28","6.8.0-1026.29","6.8.0-1027.30","6.8.0-1028.31","6.8.0-1029.32","6.8.0-1030.33","6.8.0-1031.34","6.8.0-1032.35","6.8.0-1035.38","6.8.0-1036.39","6.8.0-1038.41","6.8.0-1039.42","6.8.0-1040.43","6.8.0-1041.44","6.8.0-1042.45","6.8.0-1043.46","6.8.0-1044.47","6.8.0-1045.48","6.8.0-1046.49","6.8.0-1047.50","6.8.0-1049.52","6.8.0-1050.53","6.8.0-1051.54","6.8.0-1052.55","6.8.0-1054.57","6.8.0-1055.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1002.2","6.11.0-1003.3","6.11.0-1007.7","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4","6.17.0-1008.8","6.17.0-1014.14","6.17.0-1018.18","6.17.0-1021.21","6.17.0-1026.26","6.17.0-1029.29","6.17.0-1031.31","6.17.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1013.13~24.04.1","7.0.0-1015.15~24.04.1","7.0.0-1016.16~24.04.1","7.0.0-1018.18~24.04.1","7.0.0-1019.19~24.04.2","7.0.0-1024.25~24.04.1","7.0.0-1025.26~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1","6.8.0-1022.25.2","6.8.0-1023.26.1","6.8.0-1024.27.1","6.8.0-1025.28.1","6.8.0-1026.29.1","6.8.0-1027.30.1","6.8.0-1028.31.1","6.8.0-1029.32.1","6.8.0-1030.33.1","6.8.0-1031.34.1","6.8.0-1032.35.1","6.8.0-1035.38.1","6.8.0-1036.39.1","6.8.0-1038.41.1","6.8.0-1039.42.1","6.8.0-1040.43.1","6.8.0-1041.44.1","6.8.0-1042.45.1","6.8.0-1043.46.1","6.8.0-1044.47.1","6.8.0-1045.48.1","6.8.0-1046.49.1","6.8.0-1047.50.1","6.8.0-1049.52.1","6.8.0-1050.53.1","6.8.0-1051.54.1","6.8.0-1052.55.1","6.8.0-1054.57.1","6.8.0-1055.58.1","6.8.0-1058.61.1","6.8.0-1059.62.1","6.8.0-1060.63.1","6.8.0-1061.64.1","6.8.0-1062.65.1","6.8.0-1063.66.1","6.8.0-1064.67.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1038.42"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1031.32","6.8.0-1032.34","6.8.0-1035.38","6.8.0-1036.39"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1007.7","6.11.0-1008.8","6.11.0-1009.9","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13","6.11.0-1015.15","6.11.0-1016.16","6.11.0-1017.17","6.11.0-1018.18","6.11.0-1020.20","6.11.0-1021.21","6.11.0-1022.22","6.11.0-1023.23","6.11.0-1024.24","6.11.0-1025.25","6.11.0-1027.27"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1004.4","6.14.0-1005.5","6.14.0-1006.6","6.14.0-1007.7","6.14.0-1008.8","6.14.0-1010.10","6.14.0-1011.11","6.14.0-1012.12","6.14.0-1013.13","6.14.0-1014.14","6.14.0-1015.15","6.14.0-1016.16","6.14.0-1017.17","6.14.0-1018.18","6.14.0-1019.19","6.14.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1005.5","6.17.0-1006.6","6.17.0-1007.7","6.17.0-1008.8","6.17.0-1009.9","6.17.0-1010.10","6.17.0-1011.11","6.17.0-1012.12","6.17.0-1017.17","6.17.0-1020.20","6.17.0-1023.23","6.17.0-1024.24","6.17.0-1025.25","6.17.0-1028.28","6.17.0-1030.30","6.17.0-1032.32","6.17.0-1033.33"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1027.27","6.8.0-1028.28","6.8.0-1029.29","6.8.0-1030.30","6.8.0-1031.31","6.8.0-1032.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1025.26","6.8.0-1026.27","6.8.0-1027.28","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1035.36","6.8.0-1037.38","6.8.0-1038.39","6.8.0-1039.40","6.8.0-1040.41","6.8.0-1041.42","6.8.0-1042.43","6.8.0-1043.44","6.8.0-1044.45","6.8.0-1047.48","6.8.0-1049.50","6.8.0-1050.51","6.8.0-1052.53","6.8.0-1054.55","6.8.0-1057.58","6.8.0-1058.61","6.8.0-1059.62","6.8.0-1060.63","6.8.0-1061.64","6.8.0-1062.65","6.8.0-1063.66","6.8.0-1064.67"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1007.7~24.04.1","6.14.0-1009.9~24.04.1","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1","6.14.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.4~24.04.2","6.17.0-1007.7~24.04.1","6.17.0-1009.9~24.04.1","6.17.0-1010.10~24.04.1","6.17.0-1011.11~24.04.1","6.17.0-1014.14~24.04.1","6.17.0-1016.16~24.04.1","6.17.0-1018.18~24.04.1","6.17.0-1019.19~24.04.3","6.17.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1006.6~24.04.3","7.0.0-1011.11~24.04.1","7.0.0-1012.12~24.04.1","7.0.0-1013.13~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.23","6.8.0-1020.24","6.8.0-1024.28","6.8.0-1028.32","6.8.0-1029.33","6.8.0-1030.34","6.8.0-1031.35","6.8.0-1032.36","6.8.0-1035.39","6.8.0-1036.40","6.8.0-1038.42","6.8.0-1039.43","6.8.0-1040.44","6.8.0-1041.45","6.8.0-1042.46","6.8.0-1043.47","6.8.0-1044.48","6.8.0-1045.49","6.8.0-1047.51","6.8.0-1048.52","6.8.0-1050.54","6.8.0-1051.55","6.8.0-1052.56","6.8.0-1053.57","6.8.0-1056.60","6.8.0-1057.61","6.8.0-1060.64","6.8.0-1061.65","6.8.0-1062.66","6.8.0-1063.67","6.8.0-1064.68","6.8.0-1065.69","6.8.0-1068.72"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-22.22.1~24.04.1","6.14.0-23.23.1~24.04.1","6.14.0-24.24.1~24.04.1","6.14.0-27.27.1~24.04.1","6.14.0-28.28.1~24.04.1","6.14.0-29.29.1~24.04.1","6.14.0-32.32.1~24.04.1","6.14.0-33.33.1~24.04.1","6.14.0-34.34.1~24.04.1","6.14.0-35.35.1~24.04.1","6.14.0-36.36.1~24.04.1","6.14.0-37.37.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-14.14.1~24.04.1","6.17.0-19.19.1~24.04.1","6.17.0-20.20.1~24.04.1","6.17.0-22.22.1~24.04.1","6.17.0-23.23.1~24.04.1","6.17.0-29.29.1~24.04.1","6.17.0-35.35.1~24.04.1","6.17.0-38.38.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-42.42.1~24.04.1"}]}],"versions":["7.0.0-27.27.1~24.04.2","7.0.0-28.28.1~24.04.3","7.0.0-30.30.1~24.04.1","7.0.0-31.31.1~24.04.1","7.0.0-34.34.1~24.04.1","7.0.0-38.38.1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1005.5","6.8.0-1008.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-xilinx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.9","6.8.0-1009.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20","6.8.0-1020.21","6.8.0-1021.22","6.8.0-1022.23","6.8.0-1023.24","6.8.0-1024.25","6.8.0-1028.29","6.8.0-1029.30","6.8.0-1032.33","6.8.0-1033.34","6.8.0-1034.35","6.8.0-1035.36","6.8.0-1036.37"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:24.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1011.15","6.8.0-1012.16","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1016.20","6.8.0-1017.21","6.8.0-1022.26","6.8.0-1023.27","6.8.0-1026.30","6.8.0-1028.33","6.8.0-1029.34","6.8.0-1030.35","6.8.0-1031.36","6.8.0-1032.37","6.8.0-1033.38","6.8.0-1036.41"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7","6.8.0-2008.8","6.8.0-2009.9","6.8.0-2010.10","6.8.0-2011.11","6.8.0-2012.12","6.8.0-2013.14","6.8.0-2014.15","6.8.0-2015.16","6.8.0-2016.17","6.8.0-2017.18","6.8.0-2018.19","6.8.0-2019.20","6.8.0-2022.23","6.8.0-2023.24","6.8.0-2024.25","6.8.0-2025.26","6.8.0-2026.27","6.8.0-2028.29","6.8.0-2029.30","6.8.0-2030.31","6.8.0-2031.32","6.8.0-2032.33","6.8.0-2033.34","6.8.0-2034.35","6.8.0-2035.36","6.8.0-2036.37","6.8.0-2037.38","6.8.0-2038.39","6.8.0-2040.41","6.8.0-2041.42","6.8.0-2042.43","6.8.0-2043.44","6.8.0-2045.46","6.8.0-2046.47","6.8.0-2049.50","6.8.0-2050.52","6.8.0-2051.53","6.8.0-2052.54","6.8.0-2053.55","6.8.0-2054.56","6.8.0-2056.58"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16","6.8.1-1016.17","6.8.1-1017.18","6.8.1-1018.19","6.8.1-1019.20","6.8.1-1020.21","6.8.1-1021.22","6.8.1-1022.23","6.8.1-1023.24","6.8.1-1024.25","6.8.1-1025.26","6.8.1-1026.27","6.8.1-1030.31","6.8.1-1031.32","6.8.1-1033.34","6.8.1-1034.35","6.8.1-1035.36","6.8.1-1036.37","6.8.1-1037.38","6.8.1-1038.39","6.8.1-1039.40","6.8.1-1040.41","6.8.1-1041.42","6.8.1-1042.43","6.8.1-1045.46","6.8.1-1046.47","6.8.1-1047.48","6.8.1-1048.49","6.8.1-1051.52","6.8.1-1052.53","6.8.1-1055.56","6.8.1-1056.57","6.8.1-1057.58","6.8.1-1058.59","6.8.1-1059.60","6.8.1-1060.61","6.8.1-1061.62","6.8.1-1062.63","6.8.1-1064.65"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.14.0-1003.3~24.04.3","6.14.0-1010.10~24.04.1","6.14.0-1011.11~24.04.1","6.14.0-1012.12~24.04.1","6.14.0-1013.13~24.04.1","6.14.0-1014.14~24.04.1","6.14.0-1015.15~24.04.1","6.14.0-1016.16~24.04.1","6.14.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime-6.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1004.5~24.04.2","6.17.0-1006.7~24.04.1","6.17.0-1008.9~24.04.1","6.17.0-1009.10~24.04.1","6.17.0-1010.11~24.04.1","6.17.0-1011.12~24.04.1","6.17.0-1013.15~24.04.1","6.17.0-1014.16~24.04.1","6.17.0-1017.19~24.04.1","6.17.0-1018.20~24.04.1","6.17.0-1019.22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-aws-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1035.37+fips1","6.8.0-1036.38+fips1","6.8.0-1038.40+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.44+fips1","6.8.0-1043.45+fips1","6.8.0-1044.46+fips1","6.8.0-1045.47+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1050.53+fips1","6.8.0-1051.54+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1055.58+fips1","6.8.0-1057.60+fips1","6.8.0-1060.63+fips1","6.8.0-1061.64+fips1","6.8.0-1062.65+fips1","6.8.0-1063.66+fips1","6.8.0-1064.67+fips1","6.8.0-1065.68+fips1","6.8.0-1066.69+fips1","6.8.0-1067.70+fips1","6.8.0-1069.74+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-azure-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1034.39+fips1","6.8.0-1040.46+fips1","6.8.0-1044.50+fips1","6.8.0-1046.52+fips1","6.8.0-1047.53+fips1","6.8.0-1052.58+fips1","6.8.0-1053.59+fips1","6.8.0-1054.60+fips1","6.8.0-1059.65+fips1","6.8.0-1062.69+fips1","6.8.0-1063.71+fips2","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1069.77+fips1","6.8.0-1071.79+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-38.38+fips4","6.8.0-78.78+fips1","6.8.0-79.79+fips1","6.8.0-83.83+fips1","6.8.0-84.84+fips1","6.8.0-85.85+fips1","6.8.0-86.87+fips1","6.8.0-87.88+fips1","6.8.0-88.89+fips1","6.8.0-90.91+fips1","6.8.0-94.96+fips1","6.8.0-100.100+fips1","6.8.0-101.101+fips1","6.8.0-106.106+fips1","6.8.0-107.107+fips1","6.8.0-110.110+fips2","6.8.0-111.111+fips1","6.8.0-116.116+fips1","6.8.0-124.124+fips1","6.8.0-134.134+fips1","6.8.0-136.136+fips2","6.8.0-137.137+fips1","6.8.0-138.138+fips1","6.8.0-139.139+fips1","6.8.0-142.142+fips1","6.8.0-146.146+fips1","6.8.0-147.147+fips1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"linux-gcp-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-1036.38+fips1","6.8.0-1037.39+fips1","6.8.0-1039.41+fips1","6.8.0-1040.42+fips1","6.8.0-1041.43+fips1","6.8.0-1042.45+fips1","6.8.0-1043.46+fips1","6.8.0-1044.47+fips1","6.8.0-1045.48+fips1","6.8.0-1046.49+fips1","6.8.0-1047.50+fips1","6.8.0-1048.51+fips1","6.8.0-1052.55+fips1","6.8.0-1053.56+fips1","6.8.0-1054.57+fips1","6.8.0-1055.58+fips1","6.8.0-1058.61+fips1","6.8.0-1060.63+fips1","6.8.0-1063.69+fips1","6.8.0-1064.72+fips1","6.8.0-1065.73+fips1","6.8.0-1066.74+fips1","6.8.0-1067.75+fips1","6.8.0-1068.76+fips1","6.8.0-1070.78+fips1","6.8.0-1071.79+fips1","6.8.0-1073.81+fips1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-42.42"}]}],"versions":["6.17.0-5.5","6.17.0-6.6","6.17.0-8.8","6.18.0-8.8","6.18.0-9.9","6.19.0-3.3","6.19.0-5.5","6.19.0-6.6","6.19.0-9.9","7.0.0-7.7","7.0.0-10.10","7.0.0-12.12","7.0.0-13.13","7.0.0-14.14","7.0.0-15.15","7.0.0-22.22","7.0.0-27.27","7.0.0-28.28","7.0.0-29.29","7.0.0-30.30","7.0.0-31.31","7.0.0-34.34","7.0.0-38.38"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.17"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1002.2","6.19.0-1003.3","7.0.0-1001.1","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13","7.0.0-1014.14"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1003.3","6.17.0-1004.4","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1014.14","7.0.0-1017.17","7.0.0-1019.20"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.18"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1014.14"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1002.3","7.0.0-1003.4","7.0.0-1005.6","7.0.0-1006.7","7.0.0-1007.8","7.0.0-1008.9","7.0.0-1010.11"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17"}]}],"versions":["6.19.0-1002.2","6.19.0-1003.3","7.0.0-1002.2","7.0.0-1004.4","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13","7.0.0-1014.14","7.0.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-1005.5","7.0.0-1006.6","7.0.0-1009.9","7.0.0-1013.13","7.0.0-1015.15","7.0.0-1016.16","7.0.0-1018.18","7.0.0-1025.26"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-nvidia-bos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.0-2012.12","7.0.0-2015.15","7.0.0-2016.16","7.0.0-2018.18","7.0.0-2022.23","7.0.0-2024.25"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17"}]}],"versions":["7.0.0-1005.5","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1014.14","7.0.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1015.16"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1003.3","7.0.0-1004.4","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1014.14","7.0.0-1015.15","7.0.0-1016.16","7.0.0-1017.17","7.0.0-1019.19","7.0.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.17.0-1001.2","7.0.0-10.10.3","7.0.0-12.12.1","7.0.0-14.14.1","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1","7.0.0-31.31.1","7.0.0-34.34.1","7.0.0-38.38.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-42.42.1"}]}],"versions":["6.17.0-5.5.1","7.0.0-7.7.1","7.0.0-12.12.1","7.0.0-14.14.2","7.0.0-22.22.1","7.0.0-27.27.1","7.0.0-28.28.1","7.0.0-29.29.1","7.0.0-30.30.1","7.0.0-31.31.1","7.0.0-34.34.1","7.0.0-38.38.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-42.42~24.04.1"}]}],"versions":["7.0.0-14.14~24.04.3","7.0.0-28.28~24.04.1","7.0.0-29.29~24.04.2","7.0.0-30.30~24.04.1","7.0.0-31.31~24.04.1","7.0.0-34.34~24.04.1","7.0.0-38.38~24.04.4"],"bundled":2894},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-42.42"}]}],"versions":["6.17.0-5.5","6.17.0-6.6","6.17.0-8.8","6.18.0-8.8","6.18.0-9.9","6.19.0-3.3","6.19.0-5.5","6.19.0-6.6","6.19.0-9.9","7.0.0-7.7","7.0.0-10.10","7.0.0-12.12","7.0.0-13.13","7.0.0-14.14","7.0.0-15.15","7.0.0-22.22","7.0.0-27.27","7.0.0-28.28","7.0.0-29.29","7.0.0-30.30","7.0.0-31.31","7.0.0-34.34","7.0.0-38.38"],"bundled":2894},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.17"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1002.2","6.19.0-1003.3","7.0.0-1001.1","7.0.0-1003.3","7.0.0-1004.4","7.0.0-1006.6","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13","7.0.0-1014.14"],"bundled":2894},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1016.18"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1014.14"],"bundled":2894},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17"}]}],"versions":["6.19.0-1002.2","6.19.0-1003.3","7.0.0-1002.2","7.0.0-1004.4","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13","7.0.0-1014.14","7.0.0-1015.15"],"bundled":2894},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1015.16"}]}],"versions":["6.17.0-1002.2","6.17.0-1003.3","6.19.0-1001.1","6.19.0-1002.2","7.0.0-1001.1","7.0.0-1002.2","7.0.0-1003.3","7.0.0-1005.5","7.0.0-1007.7","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1012.12","7.0.0-1013.13"],"bundled":2894},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-oem-7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1017.17"}]}],"versions":["7.0.0-1005.5","7.0.0-1008.8","7.0.0-1009.9","7.0.0-1010.10","7.0.0-1011.11","7.0.0-1013.13","7.0.0-1014.14","7.0.0-1015.15"],"bundled":2889},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1038.42"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1016.16","6.8.0-1019.19","6.8.0-1020.20","6.8.0-1021.21","6.8.0-1022.22","6.8.0-1023.23","6.8.0-1024.24","6.8.0-1025.25","6.8.0-1026.26","6.8.0-1029.30","6.8.0-1030.31","6.8.0-1031.32","6.8.0-1032.34","6.8.0-1035.38","6.8.0-1036.39"],"bundled":485},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.7-1.1"}]}],"bundled":904},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1.160000.2.25"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.0-160000.39.1"}]}],"bundled":401}],"products":[{"vendor":"linux","product":"linux"}],"references":[{"url":"https://git.kernel.org/stable/c/effe898669c5f69ed519d6339be01ee9cd91d1a4","tags":["web"]},{"url":"https://git.kernel.org/stable/c/377aa04d7b3e73ffef6364818def188da8d6f025","tags":["web"]},{"url":"https://git.kernel.org/stable/c/49a4dcf57608ebf6432dbcb203ed25e7ed581445","tags":["web"]},{"url":"https://git.kernel.org/stable/c/bc4013c7cce58d46f792c8c87bc8c8318a70190e","tags":["web"]},{"url":"https://git.kernel.org/stable/c/a4c3c7310156493797c920b10d8648c07aa05403","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/3b3d27670c0c890ba7cf1bc3614cab61bde6d25c","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/3a0b05145053a5fad1a2ddb4e4d87b07385e63e5","tags":["web","report"]},{"url":"https://git.kernel.org/stable/c/6efbc52237facda35d2d874fe1765bb4839275d8","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89481","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-fmg2-x8fr-fw62"},{"url":"https://access.redhat.com/errata/RHSA-2026:71602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-40323","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68285","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-71116","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-22984","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-22990","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23136","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46199","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46204","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46311","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53005","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53203","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53290","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64098","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68108","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68121","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68257","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68266","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68267","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68273","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80714","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-89481","tags":["report"]},{"url":"https://bugzilla.redhat.com/2419883","tags":["report"]},{"url":"https://bugzilla.redhat.com/2422801","tags":["report"]},{"url":"https://bugzilla.redhat.com/2429602","tags":["report"]},{"url":"https://bugzilla.redhat.com/2432389","tags":["report"]},{"url":"https://bugzilla.redhat.com/2432400","tags":["report"]},{"url":"https://bugzilla.redhat.com/2439852","tags":["report"]},{"url":"https://bugzilla.redhat.com/2482533","tags":["report"]},{"url":"https://bugzilla.redhat.com/2482543","tags":["report"]},{"url":"https://bugzilla.redhat.com/2482649","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486470","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492381","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492798","tags":["report"]},{"url":"https://bugzilla.redhat.com/2493739","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502536","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513233","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513361","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513372","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513414","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513429","tags":["report"]},{"url":"https://bugzilla.redhat.com/2513434","tags":["report"]},{"url":"https://bugzilla.redhat.com/2532184","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-71602.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75746","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-50756","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-54048","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-39994","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-40242","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23105","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45856","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45861","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46319","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52972","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53049","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53270","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63794","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63829","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63992","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63994","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68432","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-72052","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-72255","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74516","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74569","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74669","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74744","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74746","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80921","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-89972","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90227","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97417","tags":["report"]},{"url":"https://bugzilla.redhat.com/2404123","tags":["report"]},{"url":"https://bugzilla.redhat.com/2418819","tags":["report"]},{"url":"https://bugzilla.redhat.com/2425013","tags":["report"]},{"url":"https://bugzilla.redhat.com/2425209","tags":["report"]},{"url":"https://bugzilla.redhat.com/2436789","tags":["report"]},{"url":"https://bugzilla.redhat.com/2482129","tags":["report"]},{"url":"https://bugzilla.redhat.com/2482143","tags":["report"]},{"url":"https://bugzilla.redhat.com/2486979","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492276","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492364","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492728","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492853","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502230","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502241","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502431","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502444","tags":["report"]},{"url":"https://bugzilla.redhat.com/2514441","tags":["report"]},{"url":"https://bugzilla.redhat.com/2516306","tags":["report"]},{"url":"https://bugzilla.redhat.com/2516717","tags":["report"]},{"url":"https://bugzilla.redhat.com/2516998","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517052","tags":["report"]},{"url":"https://bugzilla.redhat.com/2521375","tags":["report"]},{"url":"https://bugzilla.redhat.com/2524431","tags":["report"]},{"url":"https://bugzilla.redhat.com/2524483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2531066","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535140","tags":["report"]},{"url":"https://bugzilla.redhat.com/2536346","tags":["report"]},{"url":"https://bugzilla.redhat.com/2540479","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-75746.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75747","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-75747.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-89481","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1791132991.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50774","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53834","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39827","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39964","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40351","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63957","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68236","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68365","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72389","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74395","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74496","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74498","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74499","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74510","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74649","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74682","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74688","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74700","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74720","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80733","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80738","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80742","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80801","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80809","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80814","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80819","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80828","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80841","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80854","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89441","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89475","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89488","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89504","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89527","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89528","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89574","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89666","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89718","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89719","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89821","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89838","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89848","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89850","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89854","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89951","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90088","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90106","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90187","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90314","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90315","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90318","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90334","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90347","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90360","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90403","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90411","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90418","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92481","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92482","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92498","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92499","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92500","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93204","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1791780738.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52760","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53596","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80576","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80844","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98096","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1792749577.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52957","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89972","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98343","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1792979985.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22998","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43279","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45970","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63992","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72262","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74481","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89482","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89530","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89671","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98357","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98739","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89481.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-89481","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4357","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63834","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89995","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90316","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2422801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2493739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532184","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71602.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40323","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025120824-CVE-2025-40323-047f@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68285","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025121638-CVE-2025-68285-8339@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-71116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71116","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026011414-CVE-2025-71116-e57d@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22984","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026012349-CVE-2026-22984-001c@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22990","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026012351-CVE-2026-22990-a62e@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23136","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2026-23136-f28c@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46199","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026052832-CVE-2026-46199-8adf@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46204","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026052833-CVE-2026-46204-955f@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46230","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026052839-CVE-2026-46230-4948@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46311","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026060853-CVE-2026-46311-bf08@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53005","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062448-CVE-2026-53005-b325@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53203","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062501-CVE-2026-53203-2c14@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53290","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53290","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062616-CVE-2026-53290-1a5a@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64098","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071919-CVE-2026-64098-b8ed@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68108","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081053-CVE-2026-68108-4308@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-011","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68121","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081056-CVE-2026-68121-b20f@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68257","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081021-CVE-2026-68257-994c@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68266","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081023-CVE-2026-68266-e98b@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68267","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081023-CVE-2026-68267-fbd4@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68273","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081024-CVE-2026-68273-0f78@gregkh/T","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2525436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80714","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026082809-CVE-2026-80714-799a@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89481","tags":["advisory","report"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89481.mbox","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2536346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540479","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75746.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-50756","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50756","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025122453-CVE-2022-50756-ce43@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-54048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54048","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025122424-CVE-2023-54048-ea7d@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-39994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39994","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025101528-CVE-2025-39994-f3e0@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40242","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40242","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40242-8f73@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23105","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026020430-CVE-2026-23105-1d6d@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45856","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026052709-CVE-2026-45856-92b9@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45861","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026052710-CVE-2026-45861-1fba@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46319","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026060925-CVE-2026-46319-ab3d@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52972","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52972","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062439-CVE-2026-52972-7d96@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53049","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062459-CVE-2026-53049-7013@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53230","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062508-CVE-2026-53230-ddd6@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53270","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062518-CVE-2026-53270-0981@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63794","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071959-CVE-2026-63794-b463@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63829","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071908-CVE-2026-63829-ff2a@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63992","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071904-CVE-2026-63992-2846@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63994","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071905-CVE-2026-63994-97bf@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68432","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081254-CVE-2026-68432-30f2@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72052","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081515-CVE-2026-72052-1653@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72255","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-72255-56ae@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74516","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081543-CVE-2026-74516-6af5@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74569","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-74569-45bc@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74669","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026082229-CVE-2026-74669-f574@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74744","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026082658-CVE-2026-74744-db6f@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74746","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026082658-CVE-2026-74746-c2f9@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80921","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80921.mbox","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89972","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89972.mbox","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90227","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90227.mbox","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97417","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97417.mbox","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75747.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76739","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2508320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540500","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76739.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40149","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40149-2c48@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23442","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23442","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026040314-CVE-2026-23442-fe23@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43332","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43332","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43332","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43332.mbox","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46076","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026052759-CVE-2026-46076-699a@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46275","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46275","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026060803-CVE-2026-46275-9af6@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46317","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46317","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46317","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026060938-CVE-2026-46317-e13c@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52942","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062435-CVE-2026-52942-2530@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52986","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52986","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026062443-CVE-2026-52986-b7fa@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53357","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53357","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53357","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026070234-CVE-2026-53357-18f1@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63920","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63920","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63920-54a7@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63922","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63922","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63922-5716@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63924","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63924","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63924","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63924-ec60@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63984","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63984","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071902-CVE-2026-63984-8dc3@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63993","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63993","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026071905-CVE-2026-63993-165e@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64385","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026072526-CVE-2026-64385-80b2@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64557","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64557","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026072941-CVE-2026-64557-4d87@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-72099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72099","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081524-CVE-2026-72099-30c0@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-72289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72289","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081500-CVE-2026-72289-e85e@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80792","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80792","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80792.mbox","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-89480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89480","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89480.mbox","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93288","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93288","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93288.mbox","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2026:71602","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75746","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75747","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624179-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253340","tags":["report"]},{"url":"https://bugzilla.suse.com/1258335","tags":["report"]},{"url":"https://bugzilla.suse.com/1260474","tags":["report"]},{"url":"https://bugzilla.suse.com/1261564","tags":["report"]},{"url":"https://bugzilla.suse.com/1261816","tags":["report"]},{"url":"https://bugzilla.suse.com/1264330","tags":["report"]},{"url":"https://bugzilla.suse.com/1264607","tags":["report"]},{"url":"https://bugzilla.suse.com/1264747","tags":["report"]},{"url":"https://bugzilla.suse.com/1266410","tags":["report"]},{"url":"https://bugzilla.suse.com/1266848","tags":["report"]},{"url":"https://bugzilla.suse.com/1267464","tags":["report"]},{"url":"https://bugzilla.suse.com/1267672","tags":["report"]},{"url":"https://bugzilla.suse.com/1271817","tags":["report"]},{"url":"https://bugzilla.suse.com/1271901","tags":["report"]},{"url":"https://bugzilla.suse.com/1271950","tags":["report"]},{"url":"https://bugzilla.suse.com/1272145","tags":["report"]},{"url":"https://bugzilla.suse.com/1272215","tags":["report"]},{"url":"https://bugzilla.suse.com/1272347","tags":["report"]},{"url":"https://bugzilla.suse.com/1272388","tags":["report"]},{"url":"https://bugzilla.suse.com/1272473","tags":["report"]},{"url":"https://bugzilla.suse.com/1272571","tags":["report"]},{"url":"https://bugzilla.suse.com/1272802","tags":["report"]},{"url":"https://bugzilla.suse.com/1272803","tags":["report"]},{"url":"https://bugzilla.suse.com/1272890","tags":["report"]},{"url":"https://bugzilla.suse.com/1273040","tags":["report"]},{"url":"https://bugzilla.suse.com/1273059","tags":["report"]},{"url":"https://bugzilla.suse.com/1273116","tags":["report"]},{"url":"https://bugzilla.suse.com/1273258","tags":["report"]},{"url":"https://bugzilla.suse.com/1273275","tags":["report"]},{"url":"https://bugzilla.suse.com/1273290","tags":["report"]},{"url":"https://bugzilla.suse.com/1273297","tags":["report"]},{"url":"https://bugzilla.suse.com/1273320","tags":["report"]},{"url":"https://bugzilla.suse.com/1273491","tags":["report"]},{"url":"https://bugzilla.suse.com/1273512","tags":["report"]},{"url":"https://bugzilla.suse.com/1273784","tags":["report"]},{"url":"https://bugzilla.suse.com/1273879","tags":["report"]},{"url":"https://bugzilla.suse.com/1273889","tags":["report"]},{"url":"https://bugzilla.suse.com/1273938","tags":["report"]},{"url":"https://bugzilla.suse.com/1273970","tags":["report"]},{"url":"https://bugzilla.suse.com/1273976","tags":["report"]},{"url":"https://bugzilla.suse.com/1273982","tags":["report"]},{"url":"https://bugzilla.suse.com/1274037","tags":["report"]},{"url":"https://bugzilla.suse.com/1274061","tags":["report"]},{"url":"https://bugzilla.suse.com/1274245","tags":["report"]},{"url":"https://bugzilla.suse.com/1274297","tags":["report"]},{"url":"https://bugzilla.suse.com/1274298","tags":["report"]},{"url":"https://bugzilla.suse.com/1274316","tags":["report"]},{"url":"https://bugzilla.suse.com/1274319","tags":["report"]},{"url":"https://bugzilla.suse.com/1274538","tags":["report"]},{"url":"https://bugzilla.suse.com/1274629","tags":["report"]},{"url":"https://bugzilla.suse.com/1274663","tags":["report"]},{"url":"https://bugzilla.suse.com/1274776","tags":["report"]},{"url":"https://bugzilla.suse.com/1274818","tags":["report"]},{"url":"https://bugzilla.suse.com/1274824","tags":["report"]},{"url":"https://bugzilla.suse.com/1274836","tags":["report"]},{"url":"https://bugzilla.suse.com/1274890","tags":["report"]},{"url":"https://bugzilla.suse.com/1274912","tags":["report"]},{"url":"https://bugzilla.suse.com/1274920","tags":["report"]},{"url":"https://bugzilla.suse.com/1275137","tags":["report"]},{"url":"https://bugzilla.suse.com/1275142","tags":["report"]},{"url":"https://bugzilla.suse.com/1275170","tags":["report"]},{"url":"https://bugzilla.suse.com/1275495","tags":["report"]},{"url":"https://bugzilla.suse.com/1275543","tags":["report"]},{"url":"https://bugzilla.suse.com/1275545","tags":["report"]},{"url":"https://bugzilla.suse.com/1275549","tags":["report"]},{"url":"https://bugzilla.suse.com/1275559","tags":["report"]},{"url":"https://bugzilla.suse.com/1275567","tags":["report"]},{"url":"https://bugzilla.suse.com/1275682","tags":["report"]},{"url":"https://bugzilla.suse.com/1275740","tags":["report"]},{"url":"https://bugzilla.suse.com/1275924","tags":["report"]},{"url":"https://bugzilla.suse.com/1275953","tags":["report"]},{"url":"https://bugzilla.suse.com/1275972","tags":["report"]},{"url":"https://bugzilla.suse.com/1275977","tags":["report"]},{"url":"https://bugzilla.suse.com/1276007","tags":["report"]},{"url":"https://bugzilla.suse.com/1276009","tags":["report"]},{"url":"https://bugzilla.suse.com/1276262","tags":["report"]},{"url":"https://bugzilla.suse.com/1276287","tags":["report"]},{"url":"https://bugzilla.suse.com/1276295","tags":["report"]},{"url":"https://bugzilla.suse.com/1276337","tags":["report"]},{"url":"https://bugzilla.suse.com/1276338","tags":["report"]},{"url":"https://bugzilla.suse.com/1276340","tags":["report"]},{"url":"https://bugzilla.suse.com/1276345","tags":["report"]},{"url":"https://bugzilla.suse.com/1276347","tags":["report"]},{"url":"https://bugzilla.suse.com/1276349","tags":["report"]},{"url":"https://bugzilla.suse.com/1276352","tags":["report"]},{"url":"https://bugzilla.suse.com/1276353","tags":["report"]},{"url":"https://bugzilla.suse.com/1276388","tags":["report"]},{"url":"https://bugzilla.suse.com/1276460","tags":["report"]},{"url":"https://bugzilla.suse.com/1276461","tags":["report"]},{"url":"https://bugzilla.suse.com/1276462","tags":["report"]},{"url":"https://bugzilla.suse.com/1276474","tags":["report"]},{"url":"https://bugzilla.suse.com/1276475","tags":["report"]},{"url":"https://bugzilla.suse.com/1276504","tags":["report"]},{"url":"https://bugzilla.suse.com/1276508","tags":["report"]},{"url":"https://bugzilla.suse.com/1276519","tags":["report"]},{"url":"https://bugzilla.suse.com/1276532","tags":["report"]},{"url":"https://bugzilla.suse.com/1276535","tags":["report"]},{"url":"https://bugzilla.suse.com/1276538","tags":["report"]},{"url":"https://bugzilla.suse.com/1276563","tags":["report"]},{"url":"https://bugzilla.suse.com/1276565","tags":["report"]},{"url":"https://bugzilla.suse.com/1276570","tags":["report"]},{"url":"https://bugzilla.suse.com/1276573","tags":["report"]},{"url":"https://bugzilla.suse.com/1276579","tags":["report"]},{"url":"https://bugzilla.suse.com/1276783","tags":["report"]},{"url":"https://bugzilla.suse.com/1276852","tags":["report"]},{"url":"https://bugzilla.suse.com/1276921","tags":["report"]},{"url":"https://bugzilla.suse.com/1276923","tags":["report"]},{"url":"https://bugzilla.suse.com/1276927","tags":["report"]},{"url":"https://bugzilla.suse.com/1276930","tags":["report"]},{"url":"https://bugzilla.suse.com/1276947","tags":["report"]},{"url":"https://bugzilla.suse.com/1277030","tags":["report"]},{"url":"https://bugzilla.suse.com/1277032","tags":["report"]},{"url":"https://bugzilla.suse.com/1277036","tags":["report"]},{"url":"https://bugzilla.suse.com/1277098","tags":["report"]},{"url":"https://bugzilla.suse.com/1277101","tags":["report"]},{"url":"https://bugzilla.suse.com/1277109","tags":["report"]},{"url":"https://bugzilla.suse.com/1277122","tags":["report"]},{"url":"https://bugzilla.suse.com/1277128","tags":["report"]},{"url":"https://bugzilla.suse.com/1277129","tags":["report"]},{"url":"https://bugzilla.suse.com/1277143","tags":["report"]},{"url":"https://bugzilla.suse.com/1277149","tags":["report"]},{"url":"https://bugzilla.suse.com/1277153","tags":["report"]},{"url":"https://bugzilla.suse.com/1277215","tags":["report"]},{"url":"https://bugzilla.suse.com/1277217","tags":["report"]},{"url":"https://bugzilla.suse.com/1277218","tags":["report"]},{"url":"https://bugzilla.suse.com/1277234","tags":["report"]},{"url":"https://bugzilla.suse.com/1277245","tags":["report"]},{"url":"https://bugzilla.suse.com/1277272","tags":["report"]},{"url":"https://bugzilla.suse.com/1277277","tags":["report"]},{"url":"https://bugzilla.suse.com/1277296","tags":["report"]},{"url":"https://bugzilla.suse.com/1277314","tags":["report"]},{"url":"https://bugzilla.suse.com/1277342","tags":["report"]},{"url":"https://bugzilla.suse.com/1277371","tags":["report"]},{"url":"https://bugzilla.suse.com/1277372","tags":["report"]},{"url":"https://bugzilla.suse.com/1277374","tags":["report"]},{"url":"https://bugzilla.suse.com/1277379","tags":["report"]},{"url":"https://bugzilla.suse.com/1277382","tags":["report"]},{"url":"https://bugzilla.suse.com/1277392","tags":["report"]},{"url":"https://bugzilla.suse.com/1277396","tags":["report"]},{"url":"https://bugzilla.suse.com/1277401","tags":["report"]},{"url":"https://bugzilla.suse.com/1277405","tags":["report"]},{"url":"https://bugzilla.suse.com/1277410","tags":["report"]},{"url":"https://bugzilla.suse.com/1277452","tags":["report"]},{"url":"https://bugzilla.suse.com/1277489","tags":["report"]},{"url":"https://bugzilla.suse.com/1277493","tags":["report"]},{"url":"https://bugzilla.suse.com/1277555","tags":["report"]},{"url":"https://bugzilla.suse.com/1277556","tags":["report"]},{"url":"https://bugzilla.suse.com/1277557","tags":["report"]},{"url":"https://bugzilla.suse.com/1277558","tags":["report"]},{"url":"https://bugzilla.suse.com/1277568","tags":["report"]},{"url":"https://bugzilla.suse.com/1277615","tags":["report"]},{"url":"https://bugzilla.suse.com/1277625","tags":["report"]},{"url":"https://bugzilla.suse.com/1277626","tags":["report"]},{"url":"https://bugzilla.suse.com/1277640","tags":["report"]},{"url":"https://bugzilla.suse.com/1277662","tags":["report"]},{"url":"https://bugzilla.suse.com/1277674","tags":["report"]},{"url":"https://bugzilla.suse.com/1277705","tags":["report"]},{"url":"https://bugzilla.suse.com/1277766","tags":["report"]},{"url":"https://bugzilla.suse.com/1277781","tags":["report"]},{"url":"https://bugzilla.suse.com/1277784","tags":["report"]},{"url":"https://bugzilla.suse.com/1277792","tags":["report"]},{"url":"https://bugzilla.suse.com/1277801","tags":["report"]},{"url":"https://bugzilla.suse.com/1277805","tags":["report"]},{"url":"https://bugzilla.suse.com/1277820","tags":["report"]},{"url":"https://bugzilla.suse.com/1277823","tags":["report"]},{"url":"https://bugzilla.suse.com/1277824","tags":["report"]},{"url":"https://bugzilla.suse.com/1277840","tags":["report"]},{"url":"https://bugzilla.suse.com/1277843","tags":["report"]},{"url":"https://bugzilla.suse.com/1277844","tags":["report"]},{"url":"https://bugzilla.suse.com/1277857","tags":["report"]},{"url":"https://bugzilla.suse.com/1277864","tags":["report"]},{"url":"https://bugzilla.suse.com/1277885","tags":["report"]},{"url":"https://bugzilla.suse.com/1277892","tags":["report"]},{"url":"https://bugzilla.suse.com/1277895","tags":["report"]},{"url":"https://bugzilla.suse.com/1277896","tags":["report"]},{"url":"https://bugzilla.suse.com/1277897","tags":["report"]},{"url":"https://bugzilla.suse.com/1277900","tags":["report"]},{"url":"https://bugzilla.suse.com/1277904","tags":["report"]},{"url":"https://bugzilla.suse.com/1277906","tags":["report"]},{"url":"https://bugzilla.suse.com/1277910","tags":["report"]},{"url":"https://bugzilla.suse.com/1277913","tags":["report"]},{"url":"https://bugzilla.suse.com/1277915","tags":["report"]},{"url":"https://bugzilla.suse.com/1278031","tags":["report"]},{"url":"https://bugzilla.suse.com/1278035","tags":["report"]},{"url":"https://bugzilla.suse.com/1278053","tags":["report"]},{"url":"https://bugzilla.suse.com/1278054","tags":["report"]},{"url":"https://bugzilla.suse.com/1278056","tags":["report"]},{"url":"https://bugzilla.suse.com/1278063","tags":["report"]},{"url":"https://bugzilla.suse.com/1278067","tags":["report"]},{"url":"https://bugzilla.suse.com/1278087","tags":["report"]},{"url":"https://bugzilla.suse.com/1278091","tags":["report"]},{"url":"https://bugzilla.suse.com/1278100","tags":["report"]},{"url":"https://bugzilla.suse.com/1278191","tags":["report"]},{"url":"https://bugzilla.suse.com/1278195","tags":["report"]},{"url":"https://bugzilla.suse.com/1278199","tags":["report"]},{"url":"https://bugzilla.suse.com/1278205","tags":["report"]},{"url":"https://bugzilla.suse.com/1278215","tags":["report"]},{"url":"https://bugzilla.suse.com/1278216","tags":["report"]},{"url":"https://bugzilla.suse.com/1278225","tags":["report"]},{"url":"https://bugzilla.suse.com/1278245","tags":["report"]},{"url":"https://bugzilla.suse.com/1278247","tags":["report"]},{"url":"https://bugzilla.suse.com/1278255","tags":["report"]},{"url":"https://bugzilla.suse.com/1278311","tags":["report"]},{"url":"https://bugzilla.suse.com/1278314","tags":["report"]},{"url":"https://bugzilla.suse.com/1278315","tags":["report"]},{"url":"https://bugzilla.suse.com/1278363","tags":["report"]},{"url":"https://bugzilla.suse.com/1278708","tags":["report"]},{"url":"https://bugzilla.suse.com/1279116","tags":["report"]},{"url":"https://bugzilla.suse.com/1279497","tags":["report"]},{"url":"https://bugzilla.suse.com/1279525","tags":["report"]},{"url":"https://bugzilla.suse.com/1279527","tags":["report"]},{"url":"https://bugzilla.suse.com/1279532","tags":["report"]},{"url":"https://bugzilla.suse.com/1279535","tags":["report"]},{"url":"https://bugzilla.suse.com/1279536","tags":["report"]},{"url":"https://bugzilla.suse.com/1279569","tags":["report"]},{"url":"https://bugzilla.suse.com/1279581","tags":["report"]},{"url":"https://bugzilla.suse.com/1279590","tags":["report"]},{"url":"https://bugzilla.suse.com/1279621","tags":["report"]},{"url":"https://bugzilla.suse.com/1279702","tags":["report"]},{"url":"https://bugzilla.suse.com/1279786","tags":["report"]},{"url":"https://bugzilla.suse.com/1279799","tags":["report"]},{"url":"https://bugzilla.suse.com/1279819","tags":["report"]},{"url":"https://bugzilla.suse.com/1279835","tags":["report"]},{"url":"https://bugzilla.suse.com/1279850","tags":["report"]},{"url":"https://bugzilla.suse.com/1279875","tags":["report"]},{"url":"https://bugzilla.suse.com/1279878","tags":["report"]},{"url":"https://bugzilla.suse.com/1279888","tags":["report"]},{"url":"https://bugzilla.suse.com/1280143","tags":["report"]},{"url":"https://bugzilla.suse.com/1280146","tags":["report"]},{"url":"https://bugzilla.suse.com/1280148","tags":["report"]},{"url":"https://bugzilla.suse.com/1280151","tags":["report"]},{"url":"https://bugzilla.suse.com/1280163","tags":["report"]},{"url":"https://bugzilla.suse.com/1280166","tags":["report"]},{"url":"https://bugzilla.suse.com/1280171","tags":["report"]},{"url":"https://bugzilla.suse.com/1280178","tags":["report"]},{"url":"https://bugzilla.suse.com/1280179","tags":["report"]},{"url":"https://bugzilla.suse.com/1280184","tags":["report"]},{"url":"https://bugzilla.suse.com/1280193","tags":["report"]},{"url":"https://bugzilla.suse.com/1280206","tags":["report"]},{"url":"https://bugzilla.suse.com/1280235","tags":["report"]},{"url":"https://bugzilla.suse.com/1280237","tags":["report"]},{"url":"https://bugzilla.suse.com/1280243","tags":["report"]},{"url":"https://bugzilla.suse.com/1280251","tags":["report"]},{"url":"https://bugzilla.suse.com/1280252","tags":["report"]},{"url":"https://bugzilla.suse.com/1280263","tags":["report"]},{"url":"https://bugzilla.suse.com/1280296","tags":["report"]},{"url":"https://bugzilla.suse.com/1280298","tags":["report"]},{"url":"https://bugzilla.suse.com/1280299","tags":["report"]},{"url":"https://bugzilla.suse.com/1280303","tags":["report"]},{"url":"https://bugzilla.suse.com/1280309","tags":["report"]},{"url":"https://bugzilla.suse.com/1280333","tags":["report"]},{"url":"https://bugzilla.suse.com/1280334","tags":["report"]},{"url":"https://bugzilla.suse.com/1280335","tags":["report"]},{"url":"https://bugzilla.suse.com/1280336","tags":["report"]},{"url":"https://bugzilla.suse.com/1280338","tags":["report"]},{"url":"https://bugzilla.suse.com/1280350","tags":["report"]},{"url":"https://bugzilla.suse.com/1280375","tags":["report"]},{"url":"https://bugzilla.suse.com/1280379","tags":["report"]},{"url":"https://bugzilla.suse.com/1280383","tags":["report"]},{"url":"https://bugzilla.suse.com/1280384","tags":["report"]},{"url":"https://bugzilla.suse.com/1280387","tags":["report"]},{"url":"https://bugzilla.suse.com/1280388","tags":["report"]},{"url":"https://bugzilla.suse.com/1280449","tags":["report"]},{"url":"https://bugzilla.suse.com/1280451","tags":["report"]},{"url":"https://bugzilla.suse.com/1280455","tags":["report"]},{"url":"https://bugzilla.suse.com/1280456","tags":["report"]},{"url":"https://bugzilla.suse.com/1280464","tags":["report"]},{"url":"https://bugzilla.suse.com/1280468","tags":["report"]},{"url":"https://bugzilla.suse.com/1280477","tags":["report"]},{"url":"https://bugzilla.suse.com/1280487","tags":["report"]},{"url":"https://bugzilla.suse.com/1280488","tags":["report"]},{"url":"https://bugzilla.suse.com/1280490","tags":["report"]},{"url":"https://bugzilla.suse.com/1280494","tags":["report"]},{"url":"https://bugzilla.suse.com/1280508","tags":["report"]},{"url":"https://bugzilla.suse.com/1280509","tags":["report"]},{"url":"https://bugzilla.suse.com/1280518","tags":["report"]},{"url":"https://bugzilla.suse.com/1280525","tags":["report"]},{"url":"https://bugzilla.suse.com/1280544","tags":["report"]},{"url":"https://bugzilla.suse.com/1280546","tags":["report"]},{"url":"https://bugzilla.suse.com/1280548","tags":["report"]},{"url":"https://bugzilla.suse.com/1280551","tags":["report"]},{"url":"https://bugzilla.suse.com/1280576","tags":["report"]},{"url":"https://bugzilla.suse.com/1280577","tags":["report"]},{"url":"https://bugzilla.suse.com/1280711","tags":["report"]},{"url":"https://bugzilla.suse.com/1280716","tags":["report"]},{"url":"https://bugzilla.suse.com/1280717","tags":["report"]},{"url":"https://bugzilla.suse.com/1280719","tags":["report"]},{"url":"https://bugzilla.suse.com/1280720","tags":["report"]},{"url":"https://bugzilla.suse.com/1280726","tags":["report"]},{"url":"https://bugzilla.suse.com/1280727","tags":["report"]},{"url":"https://bugzilla.suse.com/1280733","tags":["report"]},{"url":"https://bugzilla.suse.com/1280758","tags":["report"]},{"url":"https://bugzilla.suse.com/1280761","tags":["report"]},{"url":"https://bugzilla.suse.com/1280766","tags":["report"]},{"url":"https://bugzilla.suse.com/1280786","tags":["report"]},{"url":"https://bugzilla.suse.com/1280797","tags":["report"]},{"url":"https://bugzilla.suse.com/1280870","tags":["report"]},{"url":"https://bugzilla.suse.com/1280872","tags":["report"]},{"url":"https://bugzilla.suse.com/1280901","tags":["report"]},{"url":"https://bugzilla.suse.com/1280920","tags":["report"]},{"url":"https://bugzilla.suse.com/1280923","tags":["report"]},{"url":"https://bugzilla.suse.com/1280969","tags":["report"]},{"url":"https://bugzilla.suse.com/1280985","tags":["report"]},{"url":"https://bugzilla.suse.com/1280993","tags":["report"]},{"url":"https://bugzilla.suse.com/1281010","tags":["report"]},{"url":"https://bugzilla.suse.com/1281014","tags":["report"]},{"url":"https://bugzilla.suse.com/1281025","tags":["report"]},{"url":"https://bugzilla.suse.com/1281054","tags":["report"]},{"url":"https://bugzilla.suse.com/1281057","tags":["report"]},{"url":"https://bugzilla.suse.com/1281077","tags":["report"]},{"url":"https://bugzilla.suse.com/1281085","tags":["report"]},{"url":"https://bugzilla.suse.com/1281136","tags":["report"]},{"url":"https://bugzilla.suse.com/1281201","tags":["report"]},{"url":"https://bugzilla.suse.com/1281202","tags":["report"]},{"url":"https://bugzilla.suse.com/1281224","tags":["report"]},{"url":"https://bugzilla.suse.com/1281226","tags":["report"]},{"url":"https://bugzilla.suse.com/1281228","tags":["report"]},{"url":"https://bugzilla.suse.com/1281229","tags":["report"]},{"url":"https://bugzilla.suse.com/1281231","tags":["report"]},{"url":"https://bugzilla.suse.com/1281273","tags":["report"]},{"url":"https://bugzilla.suse.com/1281295","tags":["report"]},{"url":"https://bugzilla.suse.com/1281379","tags":["report"]},{"url":"https://bugzilla.suse.com/1281387","tags":["report"]},{"url":"https://bugzilla.suse.com/1281399","tags":["report"]},{"url":"https://bugzilla.suse.com/1281408","tags":["report"]},{"url":"https://bugzilla.suse.com/1281496","tags":["report"]},{"url":"https://bugzilla.suse.com/1281514","tags":["report"]},{"url":"https://bugzilla.suse.com/1281525","tags":["report"]},{"url":"https://bugzilla.suse.com/1281546","tags":["report"]},{"url":"https://bugzilla.suse.com/1281597","tags":["report"]},{"url":"https://bugzilla.suse.com/1281599","tags":["report"]},{"url":"https://bugzilla.suse.com/1281644","tags":["report"]},{"url":"https://bugzilla.suse.com/1281645","tags":["report"]},{"url":"https://bugzilla.suse.com/1281660","tags":["report"]},{"url":"https://bugzilla.suse.com/1281680","tags":["report"]},{"url":"https://bugzilla.suse.com/1281682","tags":["report"]},{"url":"https://bugzilla.suse.com/1281683","tags":["report"]},{"url":"https://bugzilla.suse.com/1281717","tags":["report"]},{"url":"https://bugzilla.suse.com/1281732","tags":["report"]},{"url":"https://bugzilla.suse.com/1281738","tags":["report"]},{"url":"https://bugzilla.suse.com/1281754","tags":["report"]},{"url":"https://bugzilla.suse.com/1281777","tags":["report"]},{"url":"https://bugzilla.suse.com/1281778","tags":["report"]},{"url":"https://bugzilla.suse.com/1281786","tags":["report"]},{"url":"https://bugzilla.suse.com/1281789","tags":["report"]},{"url":"https://bugzilla.suse.com/1281795","tags":["report"]},{"url":"https://bugzilla.suse.com/1281808","tags":["report"]},{"url":"https://bugzilla.suse.com/1281825","tags":["report"]},{"url":"https://bugzilla.suse.com/1281845","tags":["report"]},{"url":"https://bugzilla.suse.com/1281922","tags":["report"]},{"url":"https://bugzilla.suse.com/1281955","tags":["report"]},{"url":"https://bugzilla.suse.com/1281956","tags":["report"]},{"url":"https://bugzilla.suse.com/1281964","tags":["report"]},{"url":"https://bugzilla.suse.com/1281973","tags":["report"]},{"url":"https://bugzilla.suse.com/1281991","tags":["report"]},{"url":"https://bugzilla.suse.com/1282003","tags":["report"]},{"url":"https://bugzilla.suse.com/1282013","tags":["report"]},{"url":"https://bugzilla.suse.com/1282020","tags":["report"]},{"url":"https://bugzilla.suse.com/1282050","tags":["report"]},{"url":"https://bugzilla.suse.com/1282054","tags":["report"]},{"url":"https://bugzilla.suse.com/1282072","tags":["report"]},{"url":"https://bugzilla.suse.com/1282104","tags":["report"]},{"url":"https://bugzilla.suse.com/1282110","tags":["report"]},{"url":"https://bugzilla.suse.com/1282113","tags":["report"]},{"url":"https://bugzilla.suse.com/1282143","tags":["report"]},{"url":"https://bugzilla.suse.com/1282147","tags":["report"]},{"url":"https://bugzilla.suse.com/1282197","tags":["report"]},{"url":"https://bugzilla.suse.com/1282270","tags":["report"]},{"url":"https://bugzilla.suse.com/1282271","tags":["report"]},{"url":"https://bugzilla.suse.com/1282288","tags":["report"]},{"url":"https://bugzilla.suse.com/1282648","tags":["report"]},{"url":"https://bugzilla.suse.com/1282672","tags":["report"]},{"url":"https://bugzilla.suse.com/1282747","tags":["report"]},{"url":"https://bugzilla.suse.com/1282774","tags":["report"]},{"url":"https://bugzilla.suse.com/1282803","tags":["report"]},{"url":"https://bugzilla.suse.com/1282808","tags":["report"]},{"url":"https://bugzilla.suse.com/1282812","tags":["report"]},{"url":"https://bugzilla.suse.com/1282823","tags":["report"]},{"url":"https://bugzilla.suse.com/1282881","tags":["report"]},{"url":"https://bugzilla.suse.com/1282891","tags":["report"]},{"url":"https://bugzilla.suse.com/1282906","tags":["report"]},{"url":"https://bugzilla.suse.com/1282975","tags":["report"]},{"url":"https://bugzilla.suse.com/1282997","tags":["report"]},{"url":"https://bugzilla.suse.com/1283119","tags":["report"]},{"url":"https://bugzilla.suse.com/1283130","tags":["report"]},{"url":"https://bugzilla.suse.com/1283149","tags":["report"]},{"url":"https://bugzilla.suse.com/1283154","tags":["report"]},{"url":"https://bugzilla.suse.com/1283163","tags":["report"]},{"url":"https://bugzilla.suse.com/1283166","tags":["report"]},{"url":"https://bugzilla.suse.com/1283173","tags":["report"]},{"url":"https://bugzilla.suse.com/1283176","tags":["report"]},{"url":"https://bugzilla.suse.com/1283201","tags":["report"]},{"url":"https://bugzilla.suse.com/1283203","tags":["report"]},{"url":"https://bugzilla.suse.com/1283205","tags":["report"]},{"url":"https://bugzilla.suse.com/1283213","tags":["report"]},{"url":"https://bugzilla.suse.com/1283230","tags":["report"]},{"url":"https://bugzilla.suse.com/1283296","tags":["report"]},{"url":"https://bugzilla.suse.com/1283312","tags":["report"]},{"url":"https://bugzilla.suse.com/1283328","tags":["report"]},{"url":"https://bugzilla.suse.com/1283450","tags":["report"]},{"url":"https://bugzilla.suse.com/1283475","tags":["report"]},{"url":"https://bugzilla.suse.com/1283479","tags":["report"]},{"url":"https://bugzilla.suse.com/1283489","tags":["report"]},{"url":"https://bugzilla.suse.com/1283490","tags":["report"]},{"url":"https://bugzilla.suse.com/1283517","tags":["report"]},{"url":"https://bugzilla.suse.com/1283739","tags":["report"]},{"url":"https://bugzilla.suse.com/1283794","tags":["report"]},{"url":"https://bugzilla.suse.com/1283795","tags":["report"]},{"url":"https://bugzilla.suse.com/1283805","tags":["report"]},{"url":"https://bugzilla.suse.com/1283880","tags":["report"]},{"url":"https://bugzilla.suse.com/1283906","tags":["report"]},{"url":"https://bugzilla.suse.com/1283945","tags":["report"]},{"url":"https://bugzilla.suse.com/1284146","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98091","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624181-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222538","tags":["report"]},{"url":"https://bugzilla.suse.com/1254408","tags":["report"]},{"url":"https://bugzilla.suse.com/1258298","tags":["report"]},{"url":"https://bugzilla.suse.com/1263017","tags":["report"]},{"url":"https://bugzilla.suse.com/1263602","tags":["report"]},{"url":"https://bugzilla.suse.com/1263865","tags":["report"]},{"url":"https://bugzilla.suse.com/1264807","tags":["report"]},{"url":"https://bugzilla.suse.com/1266735","tags":["report"]},{"url":"https://bugzilla.suse.com/1267373","tags":["report"]},{"url":"https://bugzilla.suse.com/1267564","tags":["report"]},{"url":"https://bugzilla.suse.com/1267648","tags":["report"]},{"url":"https://bugzilla.suse.com/1267985","tags":["report"]},{"url":"https://bugzilla.suse.com/1269000","tags":["report"]},{"url":"https://bugzilla.suse.com/1269685","tags":["report"]},{"url":"https://bugzilla.suse.com/1269816","tags":["report"]},{"url":"https://bugzilla.suse.com/1271906","tags":["report"]},{"url":"https://bugzilla.suse.com/1272426","tags":["report"]},{"url":"https://bugzilla.suse.com/1272471","tags":["report"]},{"url":"https://bugzilla.suse.com/1272572","tags":["report"]},{"url":"https://bugzilla.suse.com/1272793","tags":["report"]},{"url":"https://bugzilla.suse.com/1272847","tags":["report"]},{"url":"https://bugzilla.suse.com/1273251","tags":["report"]},{"url":"https://bugzilla.suse.com/1273309","tags":["report"]},{"url":"https://bugzilla.suse.com/1273339","tags":["report"]},{"url":"https://bugzilla.suse.com/1273420","tags":["report"]},{"url":"https://bugzilla.suse.com/1273522","tags":["report"]},{"url":"https://bugzilla.suse.com/1273750","tags":["report"]},{"url":"https://bugzilla.suse.com/1273759","tags":["report"]},{"url":"https://bugzilla.suse.com/1273776","tags":["report"]},{"url":"https://bugzilla.suse.com/1273782","tags":["report"]},{"url":"https://bugzilla.suse.com/1273870","tags":["report"]},{"url":"https://bugzilla.suse.com/1273899","tags":["report"]},{"url":"https://bugzilla.suse.com/1273953","tags":["report"]},{"url":"https://bugzilla.suse.com/1273999","tags":["report"]},{"url":"https://bugzilla.suse.com/1274010","tags":["report"]},{"url":"https://bugzilla.suse.com/1274036","tags":["report"]},{"url":"https://bugzilla.suse.com/1274494","tags":["report"]},{"url":"https://bugzilla.suse.com/1274637","tags":["report"]},{"url":"https://bugzilla.suse.com/1274730","tags":["report"]},{"url":"https://bugzilla.suse.com/1274803","tags":["report"]},{"url":"https://bugzilla.suse.com/1274838","tags":["report"]},{"url":"https://bugzilla.suse.com/1275092","tags":["report"]},{"url":"https://bugzilla.suse.com/1275094","tags":["report"]},{"url":"https://bugzilla.suse.com/1275129","tags":["report"]},{"url":"https://bugzilla.suse.com/1275156","tags":["report"]},{"url":"https://bugzilla.suse.com/1275455","tags":["report"]},{"url":"https://bugzilla.suse.com/1275542","tags":["report"]},{"url":"https://bugzilla.suse.com/1275588","tags":["report"]},{"url":"https://bugzilla.suse.com/1275681","tags":["report"]},{"url":"https://bugzilla.suse.com/1275684","tags":["report"]},{"url":"https://bugzilla.suse.com/1275685","tags":["report"]},{"url":"https://bugzilla.suse.com/1275690","tags":["report"]},{"url":"https://bugzilla.suse.com/1275694","tags":["report"]},{"url":"https://bugzilla.suse.com/1275799","tags":["report"]},{"url":"https://bugzilla.suse.com/1275802","tags":["report"]},{"url":"https://bugzilla.suse.com/1275866","tags":["report"]},{"url":"https://bugzilla.suse.com/1275985","tags":["report"]},{"url":"https://bugzilla.suse.com/1276006","tags":["report"]},{"url":"https://bugzilla.suse.com/1276339","tags":["report"]},{"url":"https://bugzilla.suse.com/1276341","tags":["report"]},{"url":"https://bugzilla.suse.com/1276354","tags":["report"]},{"url":"https://bugzilla.suse.com/1276381","tags":["report"]},{"url":"https://bugzilla.suse.com/1276395","tags":["report"]},{"url":"https://bugzilla.suse.com/1276445","tags":["report"]},{"url":"https://bugzilla.suse.com/1276468","tags":["report"]},{"url":"https://bugzilla.suse.com/1276473","tags":["report"]},{"url":"https://bugzilla.suse.com/1276512","tags":["report"]},{"url":"https://bugzilla.suse.com/1276528","tags":["report"]},{"url":"https://bugzilla.suse.com/1276547","tags":["report"]},{"url":"https://bugzilla.suse.com/1276553","tags":["report"]},{"url":"https://bugzilla.suse.com/1276572","tags":["report"]},{"url":"https://bugzilla.suse.com/1276766","tags":["report"]},{"url":"https://bugzilla.suse.com/1276767","tags":["report"]},{"url":"https://bugzilla.suse.com/1276793","tags":["report"]},{"url":"https://bugzilla.suse.com/1276801","tags":["report"]},{"url":"https://bugzilla.suse.com/1276803","tags":["report"]},{"url":"https://bugzilla.suse.com/1276814","tags":["report"]},{"url":"https://bugzilla.suse.com/1276818","tags":["report"]},{"url":"https://bugzilla.suse.com/1276821","tags":["report"]},{"url":"https://bugzilla.suse.com/1276840","tags":["report"]},{"url":"https://bugzilla.suse.com/1276865","tags":["report"]},{"url":"https://bugzilla.suse.com/1276866","tags":["report"]},{"url":"https://bugzilla.suse.com/1276876","tags":["report"]},{"url":"https://bugzilla.suse.com/1276880","tags":["report"]},{"url":"https://bugzilla.suse.com/1276891","tags":["report"]},{"url":"https://bugzilla.suse.com/1276905","tags":["report"]},{"url":"https://bugzilla.suse.com/1276922","tags":["report"]},{"url":"https://bugzilla.suse.com/1277023","tags":["report"]},{"url":"https://bugzilla.suse.com/1277070","tags":["report"]},{"url":"https://bugzilla.suse.com/1277078","tags":["report"]},{"url":"https://bugzilla.suse.com/1277092","tags":["report"]},{"url":"https://bugzilla.suse.com/1277108","tags":["report"]},{"url":"https://bugzilla.suse.com/1277114","tags":["report"]},{"url":"https://bugzilla.suse.com/1277115","tags":["report"]},{"url":"https://bugzilla.suse.com/1277120","tags":["report"]},{"url":"https://bugzilla.suse.com/1277148","tags":["report"]},{"url":"https://bugzilla.suse.com/1277179","tags":["report"]},{"url":"https://bugzilla.suse.com/1277229","tags":["report"]},{"url":"https://bugzilla.suse.com/1277231","tags":["report"]},{"url":"https://bugzilla.suse.com/1277233","tags":["report"]},{"url":"https://bugzilla.suse.com/1277235","tags":["report"]},{"url":"https://bugzilla.suse.com/1277249","tags":["report"]},{"url":"https://bugzilla.suse.com/1277254","tags":["report"]},{"url":"https://bugzilla.suse.com/1277268","tags":["report"]},{"url":"https://bugzilla.suse.com/1277308","tags":["report"]},{"url":"https://bugzilla.suse.com/1277321","tags":["report"]},{"url":"https://bugzilla.suse.com/1277328","tags":["report"]},{"url":"https://bugzilla.suse.com/1277335","tags":["report"]},{"url":"https://bugzilla.suse.com/1277349","tags":["report"]},{"url":"https://bugzilla.suse.com/1277350","tags":["report"]},{"url":"https://bugzilla.suse.com/1277505","tags":["report"]},{"url":"https://bugzilla.suse.com/1277513","tags":["report"]},{"url":"https://bugzilla.suse.com/1277544","tags":["report"]},{"url":"https://bugzilla.suse.com/1277553","tags":["report"]},{"url":"https://bugzilla.suse.com/1277561","tags":["report"]},{"url":"https://bugzilla.suse.com/1277571","tags":["report"]},{"url":"https://bugzilla.suse.com/1277574","tags":["report"]},{"url":"https://bugzilla.suse.com/1277590","tags":["report"]},{"url":"https://bugzilla.suse.com/1277649","tags":["report"]},{"url":"https://bugzilla.suse.com/1277655","tags":["report"]},{"url":"https://bugzilla.suse.com/1277656","tags":["report"]},{"url":"https://bugzilla.suse.com/1277728","tags":["report"]},{"url":"https://bugzilla.suse.com/1277738","tags":["report"]},{"url":"https://bugzilla.suse.com/1277748","tags":["report"]},{"url":"https://bugzilla.suse.com/1277761","tags":["report"]},{"url":"https://bugzilla.suse.com/1277764","tags":["report"]},{"url":"https://bugzilla.suse.com/1277783","tags":["report"]},{"url":"https://bugzilla.suse.com/1277796","tags":["report"]},{"url":"https://bugzilla.suse.com/1277813","tags":["report"]},{"url":"https://bugzilla.suse.com/1277818","tags":["report"]},{"url":"https://bugzilla.suse.com/1277822","tags":["report"]},{"url":"https://bugzilla.suse.com/1277837","tags":["report"]},{"url":"https://bugzilla.suse.com/1277860","tags":["report"]},{"url":"https://bugzilla.suse.com/1277862","tags":["report"]},{"url":"https://bugzilla.suse.com/1277874","tags":["report"]},{"url":"https://bugzilla.suse.com/1277876","tags":["report"]},{"url":"https://bugzilla.suse.com/1277898","tags":["report"]},{"url":"https://bugzilla.suse.com/1277901","tags":["report"]},{"url":"https://bugzilla.suse.com/1277908","tags":["report"]},{"url":"https://bugzilla.suse.com/1277918","tags":["report"]},{"url":"https://bugzilla.suse.com/1278070","tags":["report"]},{"url":"https://bugzilla.suse.com/1278088","tags":["report"]},{"url":"https://bugzilla.suse.com/1278094","tags":["report"]},{"url":"https://bugzilla.suse.com/1278098","tags":["report"]},{"url":"https://bugzilla.suse.com/1278108","tags":["report"]},{"url":"https://bugzilla.suse.com/1278113","tags":["report"]},{"url":"https://bugzilla.suse.com/1278132","tags":["report"]},{"url":"https://bugzilla.suse.com/1278155","tags":["report"]},{"url":"https://bugzilla.suse.com/1278178","tags":["report"]},{"url":"https://bugzilla.suse.com/1278180","tags":["report"]},{"url":"https://bugzilla.suse.com/1278210","tags":["report"]},{"url":"https://bugzilla.suse.com/1278211","tags":["report"]},{"url":"https://bugzilla.suse.com/1278233","tags":["report"]},{"url":"https://bugzilla.suse.com/1278236","tags":["report"]},{"url":"https://bugzilla.suse.com/1278240","tags":["report"]},{"url":"https://bugzilla.suse.com/1278253","tags":["report"]},{"url":"https://bugzilla.suse.com/1278293","tags":["report"]},{"url":"https://bugzilla.suse.com/1278294","tags":["report"]},{"url":"https://bugzilla.suse.com/1278324","tags":["report"]},{"url":"https://bugzilla.suse.com/1278331","tags":["report"]},{"url":"https://bugzilla.suse.com/1278335","tags":["report"]},{"url":"https://bugzilla.suse.com/1278395","tags":["report"]},{"url":"https://bugzilla.suse.com/1278416","tags":["report"]},{"url":"https://bugzilla.suse.com/1278716","tags":["report"]},{"url":"https://bugzilla.suse.com/1278733","tags":["report"]},{"url":"https://bugzilla.suse.com/1279422","tags":["report"]},{"url":"https://bugzilla.suse.com/1279487","tags":["report"]},{"url":"https://bugzilla.suse.com/1279580","tags":["report"]},{"url":"https://bugzilla.suse.com/1279619","tags":["report"]},{"url":"https://bugzilla.suse.com/1279811","tags":["report"]},{"url":"https://bugzilla.suse.com/1279813","tags":["report"]},{"url":"https://bugzilla.suse.com/1279847","tags":["report"]},{"url":"https://bugzilla.suse.com/1280139","tags":["report"]},{"url":"https://bugzilla.suse.com/1280496","tags":["report"]},{"url":"https://bugzilla.suse.com/1280750","tags":["report"]},{"url":"https://bugzilla.suse.com/1281042","tags":["report"]},{"url":"https://bugzilla.suse.com/1281046","tags":["report"]},{"url":"https://bugzilla.suse.com/1281358","tags":["report"]},{"url":"https://bugzilla.suse.com/1281359","tags":["report"]},{"url":"https://bugzilla.suse.com/1281383","tags":["report"]},{"url":"https://bugzilla.suse.com/1281397","tags":["report"]},{"url":"https://bugzilla.suse.com/1281427","tags":["report"]},{"url":"https://bugzilla.suse.com/1281694","tags":["report"]},{"url":"https://bugzilla.suse.com/1281793","tags":["report"]},{"url":"https://bugzilla.suse.com/1281818","tags":["report"]},{"url":"https://bugzilla.suse.com/1281927","tags":["report"]},{"url":"https://bugzilla.suse.com/1281988","tags":["report"]},{"url":"https://bugzilla.suse.com/1281993","tags":["report"]},{"url":"https://bugzilla.suse.com/1281995","tags":["report"]},{"url":"https://bugzilla.suse.com/1281997","tags":["report"]},{"url":"https://bugzilla.suse.com/1282034","tags":["report"]},{"url":"https://bugzilla.suse.com/1282040","tags":["report"]},{"url":"https://bugzilla.suse.com/1282041","tags":["report"]},{"url":"https://bugzilla.suse.com/1282042","tags":["report"]},{"url":"https://bugzilla.suse.com/1282170","tags":["report"]},{"url":"https://bugzilla.suse.com/1282193","tags":["report"]},{"url":"https://bugzilla.suse.com/1282284","tags":["report"]},{"url":"https://bugzilla.suse.com/1282286","tags":["report"]},{"url":"https://bugzilla.suse.com/1282383","tags":["report"]},{"url":"https://bugzilla.suse.com/1282767","tags":["report"]},{"url":"https://bugzilla.suse.com/1282810","tags":["report"]},{"url":"https://bugzilla.suse.com/1283121","tags":["report"]},{"url":"https://bugzilla.suse.com/1283500","tags":["report"]},{"url":"https://bugzilla.suse.com/1283935","tags":["report"]},{"url":"https://bugzilla.suse.com/1283973","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-98164","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624182-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1266008","tags":["report"]},{"url":"https://bugzilla.suse.com/1269532","tags":["report"]},{"url":"https://bugzilla.suse.com/1271955","tags":["report"]},{"url":"https://bugzilla.suse.com/1275540","tags":["report"]},{"url":"https://bugzilla.suse.com/1276277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72084","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624184-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624197-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624235-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624315-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624316-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250951","tags":["report"]},{"url":"https://bugzilla.suse.com/1267882","tags":["report"]},{"url":"https://bugzilla.suse.com/1272971","tags":["report"]},{"url":"https://bugzilla.suse.com/1274900","tags":["report"]},{"url":"https://bugzilla.suse.com/1275238","tags":["report"]},{"url":"https://bugzilla.suse.com/1275680","tags":["report"]},{"url":"https://bugzilla.suse.com/1275801","tags":["report"]},{"url":"https://bugzilla.suse.com/1275804","tags":["report"]},{"url":"https://bugzilla.suse.com/1275812","tags":["report"]},{"url":"https://bugzilla.suse.com/1275956","tags":["report"]},{"url":"https://bugzilla.suse.com/1276471","tags":["report"]},{"url":"https://bugzilla.suse.com/1277407","tags":["report"]},{"url":"https://bugzilla.suse.com/1277451","tags":["report"]},{"url":"https://bugzilla.suse.com/1277535","tags":["report"]},{"url":"https://bugzilla.suse.com/1277773","tags":["report"]},{"url":"https://bugzilla.suse.com/1277845","tags":["report"]},{"url":"https://bugzilla.suse.com/1278709","tags":["report"]},{"url":"https://bugzilla.suse.com/1280239","tags":["report"]},{"url":"https://bugzilla.suse.com/1280927","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90047","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264687-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1031492","tags":["report"]},{"url":"https://bugzilla.suse.com/1045298","tags":["report"]},{"url":"https://bugzilla.suse.com/1254633","tags":["report"]},{"url":"https://bugzilla.suse.com/1263133","tags":["report"]},{"url":"https://bugzilla.suse.com/1265138","tags":["report"]},{"url":"https://bugzilla.suse.com/1266412","tags":["report"]},{"url":"https://bugzilla.suse.com/1267990","tags":["report"]},{"url":"https://bugzilla.suse.com/1268276","tags":["report"]},{"url":"https://bugzilla.suse.com/1269081","tags":["report"]},{"url":"https://bugzilla.suse.com/1269131","tags":["report"]},{"url":"https://bugzilla.suse.com/1269234","tags":["report"]},{"url":"https://bugzilla.suse.com/1271834","tags":["report"]},{"url":"https://bugzilla.suse.com/1272211","tags":["report"]},{"url":"https://bugzilla.suse.com/1272472","tags":["report"]},{"url":"https://bugzilla.suse.com/1272480","tags":["report"]},{"url":"https://bugzilla.suse.com/1272499","tags":["report"]},{"url":"https://bugzilla.suse.com/1272517","tags":["report"]},{"url":"https://bugzilla.suse.com/1272522","tags":["report"]},{"url":"https://bugzilla.suse.com/1272523","tags":["report"]},{"url":"https://bugzilla.suse.com/1272642","tags":["report"]},{"url":"https://bugzilla.suse.com/1273023","tags":["report"]},{"url":"https://bugzilla.suse.com/1273302","tags":["report"]},{"url":"https://bugzilla.suse.com/1273480","tags":["report"]},{"url":"https://bugzilla.suse.com/1273600","tags":["report"]},{"url":"https://bugzilla.suse.com/1273603","tags":["report"]},{"url":"https://bugzilla.suse.com/1273769","tags":["report"]},{"url":"https://bugzilla.suse.com/1273868","tags":["report"]},{"url":"https://bugzilla.suse.com/1274011","tags":["report"]},{"url":"https://bugzilla.suse.com/1274026","tags":["report"]},{"url":"https://bugzilla.suse.com/1274682","tags":["report"]},{"url":"https://bugzilla.suse.com/1274831","tags":["report"]},{"url":"https://bugzilla.suse.com/1274869","tags":["report"]},{"url":"https://bugzilla.suse.com/1274981","tags":["report"]},{"url":"https://bugzilla.suse.com/1275954","tags":["report"]},{"url":"https://bugzilla.suse.com/1275957","tags":["report"]},{"url":"https://bugzilla.suse.com/1275958","tags":["report"]},{"url":"https://bugzilla.suse.com/1275959","tags":["report"]},{"url":"https://bugzilla.suse.com/1276257","tags":["report"]},{"url":"https://bugzilla.suse.com/1276321","tags":["report"]},{"url":"https://bugzilla.suse.com/1276335","tags":["report"]},{"url":"https://bugzilla.suse.com/1276495","tags":["report"]},{"url":"https://bugzilla.suse.com/1276585","tags":["report"]},{"url":"https://bugzilla.suse.com/1276925","tags":["report"]},{"url":"https://bugzilla.suse.com/1276934","tags":["report"]},{"url":"https://bugzilla.suse.com/1277064","tags":["report"]},{"url":"https://bugzilla.suse.com/1277265","tags":["report"]},{"url":"https://bugzilla.suse.com/1277485","tags":["report"]},{"url":"https://bugzilla.suse.com/1277881","tags":["report"]},{"url":"https://bugzilla.suse.com/1278310","tags":["report"]},{"url":"https://bugzilla.suse.com/1279485","tags":["report"]},{"url":"https://bugzilla.suse.com/1279627","tags":["report"]},{"url":"https://bugzilla.suse.com/1279809","tags":["report"]},{"url":"https://bugzilla.suse.com/1279812","tags":["report"]},{"url":"https://bugzilla.suse.com/1280223","tags":["report"]},{"url":"https://bugzilla.suse.com/1280230","tags":["report"]},{"url":"https://bugzilla.suse.com/1280581","tags":["report"]},{"url":"https://bugzilla.suse.com/1281176","tags":["report"]},{"url":"https://bugzilla.suse.com/1281352","tags":["report"]},{"url":"https://bugzilla.suse.com/1281429","tags":["report"]},{"url":"https://bugzilla.suse.com/1281708","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-64540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90223","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264706-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-89481","tags":["report"]},{"url":"https://git.kernel.org/linus/6efbc52237facda35d2d874fe1765bb4839275d8","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8959-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8960-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-9002-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-68451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-68453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74656","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74657","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-74754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80815","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80818","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80980","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89656","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89657","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89815","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89818","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89838","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89866","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89869","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89874","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90385","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-90435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93796","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93799","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93801","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93807","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93811","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93813","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93815","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93818","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93820","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93821","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97500","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98097","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98322","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98324","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98351","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98354","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98355","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98356","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98357","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98366","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98368","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98369","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98370","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98377","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98386","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98388","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98391","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98392","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98393","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98409","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98414","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98416","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98417","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98419","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98422","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98423","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98448","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98476","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98491","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98495","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98501","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98503","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98514","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98515","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98516","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98518","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98522","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98524","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98529","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98621","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98624","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98625","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98639","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98642","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98643","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98647","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98648","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98874","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-98930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-100079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-40954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-38261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-23346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-43331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-45930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-52953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53249","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53349","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-53353","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64305","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64340","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64341","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64343","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64344","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64352","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64421","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64424","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64527","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-64528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80628","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80634","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80646","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-89774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-92502","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93204","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-89481","title":"nvme-tcp: fix host memory disclosure on R2T for a read command","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T19:43:36.589Z","modified":"2026-10-30T12:31:53.844Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:19:55.526923Z"}],"euvd":[{"id":"EUVD-2026-76387","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T19:43:36Z","modified":"2026-10-30T12:31:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:59:09.451819Z"}],"ghsa":[{"id":"GHSA-fmg2-x8fr-fw62","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T21:31:28Z","modified":"2026-10-30T15:33:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:14:46.35353Z"}],"nvd":[{"id":"CVE-2026-89481","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T20:19:29.6Z","modified":"2026-10-30T13:20:17.727Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:12:46.62721Z"}],"osv":[{"id":"BELL-CVE-2026-89481","status":"published","published":"2026-09-15T06:05:35.314818Z","modified":"2026-10-07T07:16:24.780460532Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:26.630331Z"},{"id":"CVE-2026-89481","title":"nvme-tcp: fix host memory disclosure on R2T for a read command","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T19:43:36.589Z","modified":"2026-11-01T02:30:37.969549383Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:19.56482Z"},{"id":"DEBIAN-CVE-2026-89481","description":"In the Linux kernel, the following vulnerability has been resolved:  nvme-tcp: fix host memory disclosure on R2T for a read command  nvme_tcp_handle_r2t() does not check the direction of the request the R2T refers to. A malicious controller can send an R2T for a READ and the host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the H2CData header and nvme_tcp_try_send_data() sends the request's data buffer. That buffer is the READ destination, so its contents go to the controller.  The command then completes normally and nothing is logged.  Against a test controller that answers every READ with an R2T, a 4096 byte buffered read returned all 4096 bytes, split over two R2Ts. The pages contained stale kernel data, including an array of struct page pointers.  Reject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T20:19:29.6Z","modified":"2026-10-31T09:47:29.664254291Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"OESA-2026-4357","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist\n\nIndex allocation requires at least one bit in the $BITMAP attribute to\ntrack usage of index entries. If the bitmap is empty while index blocks\nare already present, this reflects on-disk corruption.\n\nsyzbot triggered this condition using a malformed NTFS image. During a\nrename() operation involving a long filename (which spans multiple\nindex entries), the empty bitmap allowed the name to be added without\nvalid tracking. Subsequent deletion of the original entry failed with\n-ENOENT, due to unexpected index state.\n\nReject such cases by verifying that the bitmap is not empty when index\nblocks exist.(CVE-2025-40067)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: fix fragment reassembly length accounting\n\nbatman-adv keeps a running payload length for queued fragments and uses it\nto validate a fragment chain before reassembly.\n\nThat accounting currently allows the accumulated fragment length to be\ntruncated during updates. As a result, malformed fragment chains can\nbypass the intended validation and drive reassembly with inconsistent\nlength state, leading to a local denial of service.\n\nFix the accounting by storing the accumulated length in a length-typed\nfield and rejecting update overflows before the existing validation logic\nruns.\n\nThe fix was verified against the original reproducer and against valid\nfragment reassembly paths.(CVE-2026-52914)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix listxattr handling when the buffer is full\n\n[BUG]\nIf an OCFS2 inode has both inline and block-based xattrs, listxattr()\ncan return a size larger than the caller\u0026apos;s buffer when the inline names\nconsume that buffer exactly.\n\nkernel BUG at mm/usercopy.c:102!\nOops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\nRIP: 0010:usercopy_abort+0xb7/0xd0 mm/usercopy.c:102\nCall Trace:\n __check_heap_object+0xe3/0x120 mm/slub.c:8243\n check_heap_object mm/usercopy.c:196 [inline]\n __check_object_size mm/usercopy.c:250 [inline]\n __check_object_size+0x5c5/0x780 mm/usercopy.c:215\n check_object_size include/linux/ucopysize.h:22 [inline]\n check_copy_size include/linux/ucopysize.h:59 [inline]\n copy_to_user include/linux/uaccess.h:219 [inline]\n listxattr+0xb0/0x170 fs/xattr.c:926\n filename_listxattr fs/xattr.c:958 [inline]\n path_listxattrat+0x137/0x320 fs/xattr.c:988\n __do_sys_listxattr fs/xattr.c:1001 [inline]\n __se_sys_listxattr fs/xattr.c:998 [inline]\n __x64_sys_listxattr+0x7f/0xd0 fs/xattr.c:998\n ...\n\n[CAUSE]\nCommit 936b8834366e (\u0026quot;ocfs2: Refactor xattr list and remove\nocfs2_xattr_handler().\u0026quot;) replaced the old per-handler list accounting\nwith ocfs2_xattr_list_entry(), but it kept using size == 0 to detect\nprobe mode.\n\nThat assumption stops being true once ocfs2_listxattr() finishes the\ninline-xattr pass. If the inline names fill the caller buffer exactly,\nthe block-xattr pass runs with a non-NULL buffer and a remaining size of\nzero. ocfs2_xattr_list_entry() then skips the bounds check, keeps\ncounting block names, and returns a positive size larger than the\nsupplied buffer.\n\n[FIX]\nDetect probe mode by testing whether the destination buffer pointer is\nNULL instead of whether the remaining size is zero.\n\nThat restores the pre-refactor behavior and matches the OCFS2 getxattr\nhelpers. Once the remaining buffer reaches zero while more names are\nleft, the block-xattr pass now returns -ERANGE instead of reporting a\nsize larger than the allocated list buffer.(CVE-2026-53041)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Use krealloc_array() in dal_vector_reserve()\n\n[Why \u0026amp; How]\ndal_vector_reserve() computes the allocation size as\n\u0026quot;capacity * vector-\u0026gt;struct_size\u0026quot; using uint32_t arithmetic, which can\nsilently wrap to a small value on overflow. This would cause krealloc to\nreturn a smaller buffer than expected, leading to heap overflows on\nsubsequent vector appends.\n\nReplace krealloc() with krealloc_array() which performs an internal\noverflow check and returns NULL on wrap, preventing the issue.\n\n(cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)(CVE-2026-53329)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix potential use-after-free in exfat_find_dir_entry()\n\nIn exfat_find_dir_entry(), the buffer_head obtained from\nexfat_get_dentry() is released with brelse(bh) before the fall-through\nTYPE_EXTEND branch reads the directory entry through ep (which points\ninto bh-\u0026gt;b_data):\n\n\tbrelse(bh);\n\tif (entry_type == TYPE_EXTEND) {\n\t\t...\n\t\tlen = exfat_extract_uni_name(ep, entry_uniname);\n\t\t...\n\t}\n\nAfter brelse() drops our reference, nothing guarantees that the\nunderlying page backing bh-\u0026gt;b_data remains valid for the subsequent\nexfat_extract_uni_name() read. This is the same pattern fixed in\ncommit fc961522ddbd (\u0026quot;exfat: Fix potential use after free in\nexfat_load_upcase_table()\u0026quot;).\n\nMove brelse(bh) so it runs after ep is no longer dereferenced on\neach branch.\n\nConfirmed on QEMU x86_64 with CONFIG_KASAN=y + CONFIG_DEBUG_PAGEALLOC=y\n+ CONFIG_PAGE_POISONING=y on linux-next, using a crafted exFAT image\n(long filename with same-hash collisions forcing the TYPE_EXTEND path).\nWith a debug-only invalidate_bdev() inserted between brelse(bh) and\nthe ep read to make the stale-deref window deterministic, the\nunpatched kernel faults:\n\n  BUG: KASAN: use-after-free in exfat_find_dir_entry+0x133b/0x15a0\n  BUG: unable to handle page fault for address: ffff88801a5fa0c2\n  Oops: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI\n  RIP: 0010:exfat_find_dir_entry+0x1188/0x15a0\n\nWith this patch applied, the same instrumented harness completes\ncleanly under the same sanitizer stack. I have not reproduced a\ncrash on an uninstrumented kernel under ordinary reclaim; the\ninstrumented A/B establishes the lifetime violation and that the\npatch closes it, not an unaided triggerability claim.(CVE-2026-63808)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tp_meter: restrict number of unacked list entries\n\nWhen the unacked_list is unbound, an attacker could send messages with\nsmall lengths and appropriated seqno + gaps to force the receiver to\nallocate more and more unacked_list entries. And the end either causing an\nout-of-memory situation or increase the management overhead for the (large)\nlist that significant portions of CPU cycles are wasted in searching\nthrough the list.\n\nWhen limiting the list to a specific number, it is important to still\ncorrectly add a new entry to the list. But if the list became larger than\nthe limit, the last entry of the list (with the highest seqno) must be\ndropped to still allow the earlier seqnos to finish and therefore to\ncontinue the process. Otherwise, the process might get stuck with too high\nseqnos which are not handled by batadv_tp_ack_unordered().(CVE-2026-63834)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: v: prevent OGM aggregation on disabled hardif\n\nWhen an interface gets disabled, the worker is correctly disabled by\nbatadv_hardif_disable_interface() -\u0026gt; ... -\u0026gt; batadv_v_ogm_iface_disable().\nIn this process, the skb aggr_list is also freed.\n\nBut batadv_v_ogm_send_meshif() can still queue new skbs (via\nbatadv_v_ogm_queue_on_if()) to the aggr_list. This will only stop after all\ncores can no longer find the RCU protected list of hard interfaces. These\nqueued skbs will never be freed or consumed by batadv_v_ogm_aggr_work.\n\nThe batadv_v_ogm_iface_disable() function must block\nbatadv_v_ogm_queue_on_if() to avoid leak of skbs.(CVE-2026-63835)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: itg3200: fix i2c read into the wrong stack location\n\nitg3200_read_all_channels() takes `__be16 *buf\u0026apos; as a parameter and\nfills the i2c_msg destination as `(char *)\u0026amp;buf\u0026apos;. Since `buf\u0026apos; is the\nparameter (a pointer), `\u0026amp;buf\u0026apos; is the address of the local pointer\nslot on the stack of itg3200_read_all_channels(), not the address\nof the caller\u0026apos;s scan buffer. The (char *) cast hides the type\nmismatch.\n\ni2c_transfer() therefore writes ITG3200_SCAN_ELEMENTS * sizeof(s16)\n= 8 bytes into the parameter\u0026apos;s stack slot, which is discarded when\nthe function returns. The caller\u0026apos;s scan buffer in\nitg3200_trigger_handler() is never written to, so\niio_push_to_buffers_with_timestamp() pushes uninitialised stack\ncontents to userspace via /dev/iio:deviceX every scan -- both a\nfunctional bug (no actual gyroscope or temperature data is\ndelivered through the triggered buffer) and an information leak.\n\nThe non-buffered read_raw() path is unaffected: it goes through\nitg3200_read_reg_s16() which uses `\u0026amp;out\u0026apos; on a local s16 value,\nwhere that is correct.\n\nDrop the spurious `\u0026amp;\u0026apos; so the i2c read writes into the caller\u0026apos;s\nbuffer.(CVE-2026-63934)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: team: fix NULL pointer dereference in team_xmit during mode change\n\n__team_change_mode() clears team-\u0026gt;ops with memset() before restoring\nsafe dummy handlers via team_adjust_ops(). A concurrent team_xmit()\nrunning under RCU on another CPU can read team-\u0026gt;ops.transmit during\nthis window and call a NULL function pointer, crashing the kernel.\n\nThe race requires a mode change (CAP_NET_ADMIN) concurrent with\ntransmit on the team device.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000000\n Oops: 0010 [#1] SMP KASAN NOPTI\n RIP: 0010:0x0\n Call Trace:\n  team_xmit (drivers/net/team/team_core.c:1853)\n  dev_hard_start_xmit (net/core/dev.c:3904)\n  __dev_queue_xmit (net/core/dev.c:4871)\n  packet_sendmsg (net/packet/af_packet.c:3109)\n  __sys_sendto (net/socket.c:2265)\n\nThe original code assumed that no ports means no traffic, so mode\nchanges could freely memset()/memcpy() the ops.  AF_PACKET with\nforced carrier breaks that assumption.\n\nPrevent the race instead of making it safe: replace memset()/memcpy()\nwith per-field updates that never touch transmit or receive.  Those\ntwo handlers are managed solely by team_adjust_ops(), which already\ninstalls dummies when tx_en_port_count == 0 (always true during mode\nchange since no ports are present).  WRITE_ONCE/READ_ONCE prevent\nstore/load tearing on the handler pointers.\n\nsynchronize_net() before exit_op() drains in-flight readers that may\nstill reference old mode state from before port removal switched the\nhandlers to dummies.(CVE-2026-64190)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: reject free space cache with more entries than pages\n\nWhen loading a v1 free space cache, __load_free_space_cache() takes\nnum_entries and num_bitmaps straight from the on-disk\nbtrfs_free_space_header. That header is stored in the tree_root under a key\nwith type 0, which the tree-checker has no case for, so neither count is\nvalidated before the load trusts it.\n\nThe load loops num_entries times and maps the next page whenever the current\none runs out, going through io_ctl_check_crc() -\u0026gt; io_ctl_map_page(), which\ndoes io_ctl-\u0026gt;pages[io_ctl-\u0026gt;index++]. But pages[] is allocated in\nio_ctl_init() from the cache inode\u0026apos;s i_size, not from num_entries:\n\n\tnum_pages = DIV_ROUND_UP(i_size_read(inode), PAGE_SIZE);\n\tio_ctl-\u0026gt;pages = kcalloc(num_pages, sizeof(struct page *), GFP_NOFS);\n\nSo if num_entries claims more records than the pages can hold, io_ctl-\u0026gt;index\nruns off the end of pages[]. The write side never hits this because\nio_ctl_add_entry() and io_ctl_add_bitmap() both stop once\nio_ctl-\u0026gt;index \u0026gt;= io_ctl-\u0026gt;num_pages; the read side just never had the same\ncheck.\n\nTo trigger it, take a clean cache (num_entries = \u0026lt;N\u0026gt; here), set num_entries\nin the header to 0x10000, and fix up the leaf checksum so it still passes\nthe tree-checker. The cache inode has i_size = 65536, so num_pages is 16 and\npages[] is a 16-pointer (kmalloc-128) array. The load now tries to read\n65536 entries, io_ctl-\u0026gt;index walks up to 16, and pages[16] is read past the\narray:\n\n  BUG: KASAN: slab-out-of-bounds in io_ctl_check_crc (fs/btrfs/free-space-cache.c:420 fs/btrfs/free-space-cache.c:565)\n  Read of size 8 at addr ffff88800c833a80 by task kworker/u8:3/58\n   io_ctl_check_crc (fs/btrfs/free-space-cache.c:420 fs/btrfs/free-space-cache.c:565)\n   __load_free_space_cache (fs/btrfs/free-space-cache.c:655 fs/btrfs/free-space-cache.c:820)\n   load_free_space_cache (fs/btrfs/free-space-cache.c:1017)\n   caching_thread (fs/btrfs/block-group.c:880)\n   btrfs_work_helper (fs/btrfs/async-thread.c:312)\n   process_one_work\n   worker_thread\n   kthread\n   ret_from_fork\n\nfree-space-cache.c:420 is io_ctl_map_page(), inlined into io_ctl_check_crc()\nat line 565, which is why that is the frame KASAN names. The out-of-bounds\nslot is then treated as a struct page and handed to crc32c(), so the bad\nread turns into a GP fault.\n\nAdd the missing check to io_ctl_check_crc(), which is where both the entry\nloop and the bitmap loop end up. When num_entries is too large the load now\nfails like any corrupt cache: __load_free_space_cache() drops it and rebuilds\nthe free space from the extent tree, so a valid cache is never rejected.(CVE-2026-64567)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: stop hardware after post-start probe failures\n\nwacom_parse_and_register() starts HID hardware before registering inputs\nand initializing pad LEDs/remotes. Those later steps can fail, but their\nerror paths currently release Wacom resources without stopping the HID\nhardware.\n\nRoute post-hid_hw_start() failures through hid_hw_stop() before\nreleasing driver resources.\n\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code.(CVE-2026-68091)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: make release_scratchbuffers idempotent\n\nbrcmf_pcie_release_scratchbuffers() frees the shared.scratch and\nshared.ringupd DMA buffers with dma_free_coherent() but does not clear\nthe pointers afterwards, unlike the sibling release_ringbuffers() which\nNULLs commonrings/flowrings/idxbuf on release.\n\nBoth the bus_reset .reset callback (brcmf_pcie_reset) and\nbrcmf_pcie_remove() call release_scratchbuffers.  When reset teardown\nhas run before removal, remove\u0026apos;s own teardown would call\ndma_free_coherent() a second time on the already-freed DMA allocation.\n\nNULL the pointers after free, matching release_ringbuffers(), so a later\nrelease observes that the allocation has already been released.  This\npatch makes repeated sequential release safe; the reset-work lifetime is\nhandled separately by the following patch.\n\nThis issue was found by an in-house static analysis tool.(CVE-2026-68192)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()\n\nThe vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only\nvalid while the lock is still being held. Once xa_unlock_irqrestore is\ncalled and returned, the pointer is no longer under lock and is subject\nto modification. Since, the caller still dereferences vm-\u0026gt;task_info in\namdgpu_vm_get_task_info_vm() after the lock is removed, this causes a\nuse after unlock problem.\n\nRemove the lifetime issue present in amdgpu_vm_get_task_info_pasid()\nthrough removing the amdgpu_vm_get_vm_from_pasid() function from\namdgpu_vm.c and making the relevant code inline to hold the lock while\nit is still in use.\n\n(cherry picked from commit 9d01579f3f868b333acc901815972685989092c7)(CVE-2026-68245)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: cancel sched scan results work on unregister\n\ncfg80211_sched_scan_results() can queue rdev-\u0026gt;sched_scan_res_wk from a\ndriver result notification while a scheduled scan request is present. The\nwork callback recovers the containing cfg80211_registered_device and then\nlocks the wiphy and walks the scheduled-scan request list.\n\nwiphy_unregister() already makes the wiphy unreachable and drains rdev work\nitems before cfg80211_dev_free() can release the object, but it does not\ndrain sched_scan_res_wk. A queued or running result work item can therefore\ncross the unregister/free boundary and access freed rdev state.\n\nThe buggy scenario involves two paths, with each column showing the order\nwithin that path:\n\nscheduled-scan result path:        unregister/free path:\n1. cfg80211_sched_scan_results()   1. interface teardown stops and\n   queues rdev-\u0026gt;sched_scan_res_wk.    removes the scheduled scan request.\n2. cfg80211_wq starts the work     2. wiphy_unregister() drains other\n   item and recovers rdev.            rdev work items.\n3. The worker locks rdev-\u0026gt;wiphy    3. cfg80211_dev_free() destroys and\n   and walks rdev state.              frees rdev.\n\nCancel sched_scan_res_wk in wiphy_unregister() alongside the other rdev\nwork items. cancel_work_sync() removes a pending result notification and\nwaits for an already running callback, so cfg80211_dev_free() cannot free\nrdev while this work item is still active.\n\nValidation reproduced this kernel report:\nBUG: KASAN: use-after-free in cfg80211_sched_scan_results_wk+0x4a6/0x530\nWorkqueue: cfg80211 cfg80211_sched_scan_results_wk [cfg80211]\nRead of size 8\nCall trace:\n  dump_stack_lvl+0x66/0xa0\n  print_report+0xce/0x630\n  cfg80211_sched_scan_results_wk+0x4a6/0x530\n  srso_alias_return_thunk+0x5/0xfbef5\n  __virt_addr_valid+0x224/0x430\n  kasan_report+0xac/0xe0\n  lockdep_hardirqs_on_prepare+0xea/0x1a0\n  process_one_work+0x8d0/0x18f0 (kernel/workqueue.c:3212)\n  lock_is_held_type+0x8f/0x100\n  worker_thread+0x5ad/0xfd0\n  __kthread_parkme+0xc6/0x200\n  kthread+0x31e/0x410\n  trace_hardirqs_on+0x1a/0x170\n  ret_from_fork+0x576/0x810\n  __switch_to+0x57e/0xe20\n  __switch_to_asm+0x33/0x70\n  ret_from_fork_asm+0x1a/0x30(CVE-2026-68414)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00: avoid full teardown before work setup in probe\n\nrt2x00lib_probe_dev() uses the full rt2x00lib_remove_dev() teardown for\nall probe failures. However, drv_data allocation and workqueue allocation\ncan fail before intf_work, autowakeup_work and sleep_work have been\ninitialized.\n\nDo not enter the full remove path until the probe has reached the point\nwhere those work items are set up. Return directly for drv_data allocation\nfailure, and use a small early cleanup path for workqueue allocation\nfailure.\n\nThis issue was found by our static analysis tool and then confirmed by\nmanual review of rt2x00lib_probe_dev() and rt2x00lib_remove_dev(). The\nearly probe exits should not call a common teardown path that assumes the\nlater work setup has already completed.\n\nA QEMU PoC forced alloc_ordered_workqueue() to fail before the work\ninitializers are reached. The resulting fail path entered\nrt2x00lib_remove_dev(), and DEBUG_OBJECTS reported invalid work drains with\nrt2x00lib_probe_dev() and rt2x00lib_remove_dev() in the stack.(CVE-2026-72005)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: fix OOB access from firmware tx status queue ID\n\nath_tx_edma_tasklet() accesses sc-\u0026gt;tx.txq[ts.qid] where ts.qid is a\n4-bit hardware field (0-15), but the txq array only has\nATH9K_NUM_TX_QUEUES (10) entries. A qid \u0026gt;= 10 causes an OOB array\naccess.\n\nAdd a bounds check on ts.qid before using it as an array index.(CVE-2026-74408)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: fix integer overflow in radeon_align_pitch()\n\nradeon_align_pitch() has the same kind of overflow issue as the old\namdgpu helper: both the alignment round-up add and the final\n\u0026apos;aligned * cpp\u0026apos; calculation can overflow signed int.\n\nIf that wraps, radeon_mode_dumb_create() can end up returning an\ninvalid pitch or creating a zero-sized dumb buffer.\n\nFix this by using check_add_overflow() for the alignment round-up and\ncheck_mul_overflow() for the final pitch calculation, returning 0 on\noverflow. Also reject zero pitch and size in\nradeon_mode_dumb_create().\n\nFound via AST-based call-graph analysis using sqry.(CVE-2026-74417)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: clear new_transport when removing a peer\n\nsctp_process_asconf_param() stores a newly added peer transport in\nasoc-\u0026gt;new_transport. After all parameters in the ASCONF chunk have been\nprocessed, sctp_sf_do_asconf() uses this pointer to send a HEARTBEAT to the\nnew transport.\n\nAn authenticated ASCONF from a remote SCTP peer can add a transport and\nremove it again with a wildcard DEL-IP parameter in the same chunk. The\nwildcard deletion preserves the transport on which the ASCONF arrived, but\nremoves the newly added transport through\nsctp_assoc_del_nonprimary_peers(). The removal does not clear\nasoc-\u0026gt;new_transport, leaving it pointing to the removed transport.\n\nsctp_sf_do_asconf() then creates a HEARTBEAT whose chunk-\u0026gt;transport points\nto the removed transport without holding a transport reference. During\nlocal address replacement, src_out_of_asoc_ok keeps this HEARTBEAT on\ncontrol_chunk_list. After the transport is freed by RCU, a successful\nASCONF_ACK for the replacement address releases the queued HEARTBEAT and\nsctp_outq_select_transport() reads the freed transport\u0026apos;s state.\n\nThe issue was found during a static audit of SCTP objects. With an\nauthenticated peer, the reproducer triggered the same KASAN report in 2\nof 2 unpatched runs on a KASAN-enabled netdev/main kernel:\n\n  BUG: KASAN: slab-use-after-free in sctp_outq_select_transport\n  Read of size 4 at addr ffff88800b9bd95c by task python3/197\n\n  Call Trace:\n   sctp_outq_select_transport+0x549/0x8b0 [sctp]\n   sctp_outq_flush+0x306/0x2c60 [sctp]\n   sctp_transport_immediate_rtx+0xaf/0x260 [sctp]\n   sctp_process_asconf_ack+0xa48/0xf70 [sctp]\n\n  Allocated by task 197:\n   sctp_transport_new+0x68/0x650 [sctp]\n   sctp_assoc_add_peer+0x258/0x12a0 [sctp]\n   sctp_process_asconf+0x5e9/0x1090 [sctp]\n\n  Last potentially related work creation:\n   __call_rcu_common.constprop.0+0x77/0xb70\n   sctp_assoc_del_nonprimary_peers+0x7c/0xd0 [sctp]\n   sctp_process_asconf+0xd9c/0x1090 [sctp]\n\nThe first invalid access was a four-byte read of transport-\u0026gt;state at\nnet/sctp/outqueue.c:833. The same reproducer completed the full\nauthenticated ASCONF and local-address replacement sequence with this\nchange without a KASAN report or oops.\n\nClear new_transport when its peer is removed, before it can be used to\ncreate the HEARTBEAT.(CVE-2026-74586)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsched/psi: Shut down rtpoll_timer in psi_cgroup_free()\n\npsi_schedule_rtpoll_work() is called locklessly from the scheduler hotpath\nand can race psi_trigger_destroy() taking down the last rtpoll trigger under\nrtpoll_trigger_lock:\n\n  psi_schedule_rtpoll_work()        psi_trigger_destroy()\n\n  rcu_read_lock();\n  task = rcu_dereference(rtpoll_task);\n                                    rcu_assign_pointer(rtpoll_task, NULL);\n                                    timer_delete(\u0026amp;rtpoll_timer);\n  mod_timer(\u0026amp;rtpoll_timer, ...);\n  rcu_read_unlock();\n                                    synchronize_rcu();\n                                    kthread_stop(task_to_destroy);\n\nThe group can then be freed with the re-armed timer still pending, and\npoll_timer_fn() runs on freed memory.\n\n461daba06bdc (\u0026quot;psi: eliminate kthread_worker from psi trigger scheduling\nmechanism\u0026quot;) deleted the timer synchronously after the synchronize_rcu(),\nwhich prevented this but raced trigger creation instead: the deletion could\ncancel the timer that a new trigger set armed during the grace period and,\nas creation also reinitialized the timer at the time, corrupt it.\n8f91efd870ea (\u0026quot;psi: Fix race between psi_trigger_create/destroy\u0026quot;) moved the\ninitialization into group_init() and the deletion into the locked section,\ntrading the creation races for the window above.\n\nNeither placement in the destruction path works. A pending timer firing\nwhile the group is alive is harmless though. poll_timer_fn() just wakes the\nrtpoll waitqueue and doesn\u0026apos;t re-arm itself. Bind the timer to the group\u0026apos;s\nlifetime instead and shut it down in psi_cgroup_free(). Nothing can arm it\nby then. timer_shutdown_sync() because the timer is never armed again.(CVE-2026-74594)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntipc: read le-\u0026gt;link under the node lock in tipc_node_link_down()\n\ntipc_node_link_down() caches the link pointer before taking n-\u0026gt;lock:\n\n\tstruct tipc_link *l = le-\u0026gt;link;\t\t/* unlocked */\n\n\tif (!l)\n\t\treturn;\n\ttipc_node_write_lock(n);\n\tif (!tipc_link_is_establishing(l)) {\t/* deref l */\n\t...\n\t\ttipc_link_reset(l);\t\t/* write into l */\n\tif (delete) {\n\t\tkfree(l);\n\t\tle-\u0026gt;link = NULL;\n\nThe delete=true caller frees that very object under n-\u0026gt;lock, so the lock\ndoes not protect the cached pointer against it:\n\n - CPU A, delete=false: tipc_rcv() on TIPC_LINK_DOWN_EVT, or the link\n   supervision timer via tipc_node_timeout(), reads l unlocked and then\n   dereferences it under n-\u0026gt;lock;\n - CPU B, delete=true: netlink TIPC_NL_BEARER_DISABLE -\u0026gt; bearer_disable()\n   -\u0026gt; tipc_node_delete_links() -\u0026gt; tipc_node_link_down(n, bearer_id, true)\n   -\u0026gt; kfree(l).\n\nThe link is freed with plain kfree(), not kfree_rcu(), and for UDP bearers\ndisable_media() only schedules the asynchronous cleanup_bearer() work, so\nits synchronize_net() runs after the links are already gone.  An in-flight\nCPU A that has read l therefore dereferences freed memory once B frees it:\na use-after-free read in tipc_link_is_establishing(), and a use-after-free\nwrite via tipc_link_reset() on the establishing branch.\n\nThe following trace was captured on 7.2.0-rc5-00284-gaf39eb111ce6:\n\n  BUG: KASAN: slab-use-after-free in tipc_link_is_establishing (net/tipc/link.c:285)\n  Read of size 4 at addr ffff88802e2aa068 by task swapper/2/0\n   tipc_link_is_establishing (net/tipc/link.c:285)\n   tipc_node_link_down (net/tipc/node.c:1076)\n   tipc_node_timeout (net/tipc/node.c:843)\n  Allocated by task 9549:\n   tipc_link_create (net/tipc/link.c:490)\n   tipc_node_check_dest (net/tipc/node.c:1279)\n   tipc_disc_rcv (net/tipc/discover.c:252)\n   tipc_udp_recv (net/tipc/udp_media.c:389)\n  Freed by task 9549:\n   tipc_node_link_down (net/tipc/node.c:1084)\n   tipc_node_delete_links (net/tipc/node.c:1320)\n   bearer_disable (net/tipc/bearer.c:414)\n   __tipc_nl_bearer_disable (net/tipc/bearer.c:992)\n\nMove the le-\u0026gt;link read inside tipc_node_write_lock(), so it is serialised\nagainst the kfree() in the delete path.  A racing teardown now either has\nnot run yet, and we see a valid link, or has already run, and we see NULL.(CVE-2026-74609)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npacket: use consistent hard_header_len in TX_RING send path\n\ntpacket_snd() reads dev-\u0026gt;hard_header_len independently for skb\nallocation and header construction in tpacket_fill_skb(). Concurrent\nnetdevice reconfiguration can therefore make the reserved headroom\nsmaller than the amount later pushed, or make copylen - hard_header_len\nnegative.\n\nSnapshot hard_header_len once before processing ring frames and use it\nfor the frame limit, headroom allocation, copy length, and skb\nconstruction. Pass the snapshot to tpacket_fill_skb().\n\nThe separate SOCK_DGRAM consistency problem between hard_header_len and\nheader_ops-\u0026gt;create is not addressed here.(CVE-2026-74668)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: clear control chunk transport if it is being removed\n\nsctp_make_heartbeat_ack() caches the destination transport in\nchunk-\u0026gt;transport without taking a reference. When src_out_of_asoc_ok is\nenabled, the HEARTBEAT ACK may remain queued on control_chunk_list instead\nof being transmitted immediately.\n\nIf the peer transport is removed while the chunk is still queued,\nsctp_assoc_rm_peer() drops the transport and schedules it for RCU freeing,\nbut only clears cached transport pointers in out_chunk_list.  The queued\ncontrol chunk therefore retains a dangling transport pointer.\n\nOnce an ASCONF_ACK clears the suppression and the queued control chunk is\ntransmitted, SCTP dereferences the stale transport pointer, leading to a\nuse-after-free.\n\nFix this by also clearing chunk-\u0026gt;transport for queued control chunks in\ncontrol_chunk_list when removing the transport.(CVE-2026-74688)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio_ccw: Implement a crw lock\n\nUnlike the channel_program struct, which covers synchronous I/O\nsubmissions and asynchronous interrupts, the CRW region relies\nexclusively on asynchronous events coming from hardware.\n\nImplement a lock to manage the list of those payloads, to ensure\nthey are read cohesively.(CVE-2026-80547)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio_ccw: Selectively expand io_mutex\n\nThe io_mutex was defined to serialize the io_regions, but then has\nalso sort of been associated with the I/O themselves because of\nthe close relationship they share.\n\nWith the handful of races that are possible, the choices are either to:\n A) expand the scope of io_mutex to close these remaining windows, or\n B) reduce the scope of io_mutex to just io_region, and introduce a new\n    lock mechanism for the remaining I/O resources\n\nThis patch implements A, since B brings with it a lot more interactions\nthat would need to be tracked and kept in a correct hierarchy. It also\ntakes advantage of the workqueue element for cp_free() that now gets\ncalled out of fsm_notoper(), which could be invoked out of an interrupt\ncontext and thus cannot acquire a mutex itself.(CVE-2026-80548)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio_ccw: Ensure first IDAW remains constant\n\nThe first IDAW in a list does not need to be on a 2K/4K boundary\nlike all others, and so is read separately to accurately calculate\nthe size of the buffer needed to read the full IDAL.\n\nVerify that the address found in the first IDAW is unchanged between\nreads, to ensure a consistent set of IDAWs being worked with.(CVE-2026-80551)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio_ccw: Limit the number of channel program segments\n\nThe processing of channel programs, and the CCWs within them, is done\nrecursively. As such, there is an arbitrary (but not architectural)\nlimit to the number of CCWs that can exist in a single channel program.\n\nThe vfio-ccw logic breaks these channel programs into segments whenever\nit encounters a Transfer-In-Channel (TIC) CCW, and the combined number\nof segments count towards the global limit. Impose an equivalent limit\nto the number of segments until such logic can be made non-recursive.(CVE-2026-80554)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nInput: synaptics-rmi4 - fix F55 transmitter electrode count typo\n\nDuring F55 sensor detection, the transmitter (TX) electrode count was\nincorrectly assigned the value of the receiver (RX) electrode count\ndue to copy-paste typos.\n\nThis incorrect value was then propagated to the driver data and used\nby F54 to determine the diagnostics report size. On devices with more\nRX than TX electrodes, this inflated the perceived TX count, leading\nto incorrect report size calculations and potential out-of-bounds\nbuffer accesses.\n\nFix the typos by correctly assigning the TX electrode counts.(CVE-2026-80754)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: validate attr entry pointer before field access\n\nxfs_attr3_leaf_verify_entry() accesses lentry/rentry fields (namelen,\nvaluelen) before checking if the entry pointer itself is within bounds.\nIf nameidx is crafted to point near the end of the buffer, these field\naccesses can read out-of-bounds before the bounds check at\nname_end \u0026gt; buf_end is performed.\n\nAdd explicit bounds checks for entry pointers before accessing their\nfields. Use offsetof() to check that the start of the flexible array\nmember (nameval/name) is within bounds, which ensures all preceding\nfields are safe to access.(CVE-2026-80805)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\next4: don\u0026apos;t enable DAX on new encrypted files\n\nCurrently, when a new encrypted regular file is created, the call to\next4_set_inode_flags(inode, init=true) in __ext4_new_inode() is made\nbefore EXT4_INODE_ENCRYPT is set.  As a result, it can set S_DAX if the\nfilesystem is mounted with \u0026quot;-o dax=always\u0026quot;.\n\nEXT4_INODE_ENCRYPT then actually gets set a bit later in\n__ext4_new_inode(), when it calls fscrypt_set_context() which calls\next4_set_context().  ext4_set_context() sets EXT4_INODE_ENCRYPT and\ncalls ext4_set_inode_flags(inode, init=false) to set S_ENCRYPTED too.\n\nThis was intended to clear S_DAX as well.  However, this was broken by\ncommit 043546e46dc7 (\u0026quot;fs/ext4: Only change S_DAX on inode load\u0026quot;).  This\ncauses data written to the file to bypass encryption, also causing\nxfstests failures such as generic/548 (when \u0026quot;-o dax=always\u0026quot; is used).\n\nFix this by simplifying the flow by making __ext4_new_inode() set\nEXT4_INODE_ENCRYPT earlier.  This makes it take effect in\next4_set_inode_flags(inode, init=true), making S_DAX never be set.\n\nSimilarly, make EXT4_STATE_MAY_INLINE_DATA never be set in the first\nplace on new encrypted inodes.  Then it doesn\u0026apos;t need to be cleared.\n\nAs a result of these simplifications, ext4_set_context() no longer needs\nto change inode flags or state when \u0026apos;handle != NULL\u0026apos;.  Remove that too.(CVE-2026-80806)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_tcm: keep port count until LUN teardown completes\n\ntcm_usbg_drop_nexus() permits session removal once tpg_port_count\nreaches zero. However, usbg_port_unlink() currently decrements that\ncount from the fabric_pre_unlink() callback, before core_dev_del_lun()\nwaits for active se_lun references to drain.\n\nIf removal of the last LUN races a nexus removal, the latter can observe\na zero port count and call target_remove_session(). This frees\nsess_cmd_map while an in-flight struct usbg_cmd, including its work item,\ncan still be accessed.\n\nOverlapping the last-LUN unlink with nexus removal reproduces this\nlifetime violation as a DEBUG_OBJECTS \u0026quot;free active\u0026quot; warning for\nusbg_cmd_work, followed by a target-core BUG/Oops.\n\nThe generic target-core unlink path has no callback after\ncore_dev_del_lun() completes. Add an optional fabric_post_unlink()\ncallback and use it for the f_tcm port count. The count now remains\nnonzero until core_dev_del_lun() has finished draining active LUN\nreferences, preventing nexus removal from freeing the session during\ncommand completion.(CVE-2026-80854)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: vsie: zero stale crypto bits\n\nWhen shadowing crypto access bits from a format0 apcb (crycb 0 or 1),\nthe bits 64..255 are unchanged from whatever is in the vsie page in the\ncrycb and thus in the apcb. This gives a nested guest potential access\nto a device no longer available. Zero out the remaining bits.(CVE-2026-80921)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: do not dereference an unset send buffer on the SMC-D teardown path\n\nsmc_close_stream_wait() calls smc_tx_prepared_sends() from inside its\nsk_wait_event() condition, and sk_wait_event() evaluates that condition\nonce with the socket lock released. smcd_buf_detach() clears\nconn-\u0026gt;sndbuf_desc from smc_conn_kill() under lock_sock(), so a link group\nterminating while a socket waits there leaves the helper dereferencing\nNULL, faulting out of close(). SIOCOUTQ reads the field by hand, and\nsmc_close_cancel_work() drops the lock across two cancel_*_sync() calls.\n\nSample the pointer once in the helper, report nothing prepared while it is\nunset, and bound the ioctl the same way. The receive tasklet dereferences\nthe field directly in smc_cdc_msg_recv_action(), not through this helper;\n1/2 is what keeps it from running that late.(CVE-2026-80984)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderbolt: Mark the connection down when bringing it up fails\n\nEvery failure path in tbnet_connected_work() undoes its own work and\nreturns without clearing login_sent, so the connection still looks\nestablished. The next tbnet_tear_down() therefore takes its main branch\nand repeats a teardown that already happened: it stops rings that are\nalready stopped, which is a dev_WARN() and fatal under panic_on_warn,\nand it releases net-\u0026gt;remote_transmit_path even on the HopID mismatch\npath, where this connection never owned that id, silently freeing one\nthat someone else is still using.\n\nClear login_sent on those paths. That is enough for tbnet_tear_down() to\nleave the unwound state alone, and login_received has to stay set: it\nrecords that the peer has logged in and carries the transmit path it gave\nus, which nothing on this side can make the peer send again. Two things\nchange beyond keeping the teardown out of the way: the logout request in\nthat block is no longer sent, and the peer\u0026apos;s next login request now\nre-queues our login work rather than connected_work, giving the\nconnection a fresh login instead of a retry on stale state.(CVE-2026-80989)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix flow mask use-after-free on flow deletion\n\nThe commit in the Fixes tag below made so flow-\u0026gt;mask free is scheduled\nvia RCU right after it is removed from the flow table.  The pointer\nstays in the flow structure and it can be accessible while in the same\nRCU critical section.  This is done to avoid requiring ovs_mutex for\nthe ovs_flow_free().\n\nHowever, while removing the flow during processing of CMD_DEL, we do\nnot take RCU read lock before the removal, and ovs_flow_cmd_fill_info()\nuses the flow-\u0026gt;mask pointer afterwards.  The RCU read lock is taken,\nbut it\u0026apos;s already late at that point.  The comment on that line\nacknowledges that the lock is cosmetic and doesn\u0026apos;t serve a real purpose.\n\nThis leads to use-after-free if the RCU grace period passes between\nremoval and the filling.  It is a short race window, but it is there\nand can lead to a real crash in case memory allocation for the info\ntakes a bit longer:\n\n BUG: KASAN: slab-use-after-free in __ovs_nla_put_key\n             net/openvswitch/flow_netlink.c:1996\n BUG: KASAN: slab-use-after-free in ovs_nla_put_key+0x2463/0x2e30\n             net/openvswitch/flow_netlink.c:2250\n Read of size 4 at addr ffff88801ee89970 by task ovs_flow_del_ec/9487\n\n Call Trace:\n  \u0026lt;TASK\u0026gt;\n  __ovs_nla_put_key net/openvswitch/flow_netlink.c:1996\n  ovs_nla_put_key+0x2463/0x2e30 net/openvswitch/flow_netlink.c:2250\n  ovs_flow_cmd_fill_info+0x420/0x9c0 net/openvswitch/datapath.c:930\n  ovs_flow_cmd_del+0x53a/0x970 net/openvswitch/datapath.c:1467\n  ...\n  netlink_rcv_skb+0x156/0x420 net/netlink/af_netlink.c:2556\n  \u0026lt;/TASK\u0026gt;\n\n Allocated by task 9487:\n  mask_alloc net/openvswitch/flow_table.c:967\n  flow_mask_insert net/openvswitch/flow_table.c:1012\n  ovs_flow_tbl_insert+0xea2/0x1a90 net/openvswitch/flow_table.c:1084\n  ovs_flow_cmd_new+0x7e3/0xd90 net/openvswitch/datapath.c:1086\n  ...\n  netlink_rcv_skb+0x156/0x420 net/netlink/af_netlink.c:2556\n\n Freed by task 9485:\n  rcu_free_sheaf+0x1e/0x100 mm/slub.c:5978\n  rcu_do_batch kernel/rcu/tree.c:2645\n  rcu_core+0x59c/0x10c0 kernel/rcu/tree.c:2897\n  handle_softirqs+0x1e4/0x9a0 kernel/softirq.c:622\n  ...\n  instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062\n\novs_flow_tbl_remove() must be called after the ovs_flow_cmd_fill_info()\nto avoid this race.  This also helps with cleaning up the forced cast\nand the cosmetic RCU read lock.  Before the commit in the Fixes tag the\norder did not matter as long as the flow object itself was not freed.\n\nA wider RCU critical section could be another option, but we have a\nGFP_KERNEL allocation in the way.\n\nReported by Trend Micro\u0026apos;s Zero Day Initiative as ZDI-CAN-32042.(CVE-2026-80994)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmmc: via-sdmmc: stop card-detect handling on probe failure\n\nrequest_irq() registers the SD card-detect interrupt and the probe enables\nit before mmc_add_host() runs. If mmc_add_host() fails, the error path only\nunmaps the registers and returns: the interrupt stays registered, so the\nhandler keeps running against the host once it is freed. via_sdc_isr()\ndereferences sdhost and its MMIO base and schedules carddet_work, which\nvia_sdc_card_detect() also runs against freed memory through its\ncontainer_of() dereference.\n\nAdd a probe-error path that disables and frees the interrupt and cancels\ncarddet_work before unmapping. carddet_work can re-enable the device\ninterrupt via via_reset_pcictrl(), which restores PCIINTCTRL, so mask it\nagain after cancelling the work.\n\nThis issue was found by an in-house static analysis tool and confirmed by\nmanual code review.(CVE-2026-89440)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix NULL deref on untransmitted RECONF completion\n\nsctp_process_strreset_outreq(), sctp_process_strreset_addstrm_out() and\nsctp_process_strreset_resp() complete a pending stream reconfiguration\nrequest by stopping the reconf timer on the transport it was sent on:\n\n\tt = asoc-\u0026gt;strreset_chunk-\u0026gt;transport;\n\tif (timer_delete(\u0026amp;t-\u0026gt;reconf_timer))\n\t\tsctp_transport_put(t);\n\nchunk-\u0026gt;transport is assigned by __sctp_packet_append_chunk() when the\nchunk is appended to an outbound packet, and sctp_outq_flush_ctrl() arms\nthe reconf timer at that same point. A request already published in\nasoc-\u0026gt;strreset_chunk but not yet transmitted has neither, so completing\nit dereferences NULL.\n\nTwo ways to get there. sctp_send_asconf_del_ip() sets\nasoc-\u0026gt;src_out_of_asoc_ok without sending anything when the address being\nremoved is the association\u0026apos;s last one, and sctp_outq_flush_ctrl() then\nleaves every non-ASCONF control chunk queued; as only\nsctp_process_asconf_ack() clears that flag, it persists. An unprivileged\nprocess that removes such an address and then asks for a stream reset\npanics the kernel from softirq. A peer needs neither ASCONF nor local\nhelp: sctp_cmd_interpreter() uncorks the outqueue only once the whole\npacket has been processed, so a reply built while walking a RECONF chunk\nstays untransmitted for the rest of that walk, and one RECONF chunk\ncarrying [Incoming SSN Reset Request, Outgoing SSN Reset Request,\nResponse] -- or two RECONF chunks in one packet -- reaches the same\ndereference.\n\n  KASAN: null-ptr-deref in range [0x00000000000001e8-0x00000000000001ef]\n  RIP: 0010:timer_delete+0x67/0x110\n  Call Trace:\n   \u0026lt;IRQ\u0026gt;\n   sctp_process_strreset_addstrm_out (net/sctp/stream.c:832)\n   sctp_sf_do_reconf (net/sctp/sm_statefuns.c:4212)\n   sctp_do_sm (net/sctp/sm_sideeffect.c:1172)\n   sctp_assoc_bh_rcv (net/sctp/associola.c:1044)\n   sctp_rcv (net/sctp/input.c:243)\n   ip_local_deliver (net/ipv4/ip_input.c:262)\n   process_backlog (net/core/dev.c:6680)\n   \u0026lt;/IRQ\u0026gt;\n\nA response can only acknowledge a request that was actually sent, so do\nnot match asoc-\u0026gt;strreset_chunk while chunk-\u0026gt;transport is NULL. Guarding\nthe lookup covers all three completion sites.(CVE-2026-89477)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: reject a read that transferred too few bytes\n\nnvme_tcp_recv_data() completes a request once the current C2HData PDU\nhas been consumed. Nothing compares the total bytes received against\nthe length the command asked for: struct nvme_tcp_request has no\nreceive-side counter, queue-\u0026gt;data_remaining is per queue, and\nblk_mq_end_request() completes for blk_rq_bytes(rq) unconditionally\nwith no residual concept anywhere above.\n\nA controller can therefore answer a 4096-byte read with 512 bytes and\nhave it reported as a complete read; user space then gets 4096 bytes of\nwhich 3584 are whatever was already in the page. I reproduced that with\na test target.\n\nCount the bytes received and refuse to complete a successful read whose\ncount does not match, at the two NVME_TCP_F_DATA_SUCCESS paths and in\nnvme_tcp_process_nvme_cqe(). The success test shifts req-\u0026gt;status right\nby one, because the driver keeps the wire value there and shifts it on\ncompletion, so the check must see what the completion path will see.\nOnly REQ_OP_READ is checked, because there the length comes from the\nsectors the request covers; a passthrough command is built by its\nsubmitter, which picks both command and buffer, so the kernel has\nnothing to compare against.(CVE-2026-89480)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request\u0026apos;s data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.(CVE-2026-89481)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nlockd: pin next file across nlm_inspect_file lock-drop\n\nnlm_traverse_files() pins the current file with f_count++ across\na mutex_unlock for nlm_inspect_file(), but nothing pins the saved\nnext pointer.  A concurrent nlm_release_file() can kfree the next\nfile during the unlock window, and the iterator dereferences freed\nmemory on the next loop step.\n\nPin both current and next before the lock-drop.  Advance by\nswapping the pinned cursors at the end of each iteration so next\nis always held alive across the unlock.\n\nAlways call nlm_file_release() after dropping the iteration pin,\nregardless of whether the file matched the predicate.  Use\nnlm_file_inuse(), which does a live walk of the inode lock list,\nrather than the cached f_locks field, so skipped files that never\nran nlm_inspect_file() are evaluated correctly.\n\nBecause every file in a hash bucket is now pinned and released,\nfiles skipped by the is_failover_file predicate that have no\nlocks, blocks, shares, or external references are deleted during\ntraversal.  The old code never evaluated skipped files for\ncleanup.  The new behavior is intentional: such files are stale\nand should not persist in the table.(CVE-2026-89485)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: only skb_tx_error() a packet we are about to drop\n\nqueue_userspace_packet() borrows the packet skb -- it only copies it into\na private netlink message (user_skb) and does not own it; on return\ndo_execute_actions() keeps forwarding it through the flow\u0026apos;s remaining\nactions. Its error path nevertheless calls skb_tx_error(skb), which via\nskb_zcopy_clear() does skb_shinfo(skb)-\u0026gt;flags \u0026amp;= ~SKBFL_ALL_ZEROCOPY,\nstripping SKBFL_SHARED_FRAG from that live skb (skb_tx_error()\u0026apos;s kerneldoc\nsays \u0026quot;skb must be freed afterwards\u0026quot;).\n\nFor a MSG_ZEROCOPY skb carrying page-cache frags, SKBFL_SHARED_FRAG is\nwhat makes esp_input() skb_cow_data() before in-place AEAD; once it is\nstripped a later local ESP-in-UDP delivery decrypts in place over pages\nthe sender does not own -- an unprivileged page-cache write (the\n\u0026quot;Fragnesia\u0026quot; primitive).\ndo_execute_actions() ignores output_userspace()\u0026apos;s return value, so any\naction after a failed USERSPACE upcall inherits the stripped skb.\n\nMove the skb_tx_error() to the flow-miss drop path - the \u0026quot;default\u0026quot;\nbranch of ovs_dp_process_packet()\u0026apos;s switch(error), before kfree_skb().\n\nThe call has been here since commit 36d5fe6a0007 (\u0026quot;core, nfqueue,\nopenvswitch: Orphan frags in skb_zerocopy and handle errors\u0026quot;) but was\nharmless until esp_input() began relying on SKBFL_SHARED_FRAG to gate\nin-place decrypt; only then did stripping it on a still-forwarded skb\nbecome a page-cache write primitive.(CVE-2026-89487)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: validate directory-index entry counts when reading metadata\n\nocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() check the ECC and\nsignature of an indexed-directory block before it reaches higher-level\ncallers, but neither validator bounds the ocfs2_dx_entry_list counts\nagainst the capacity of the block that holds them.\n\nocfs2_dx_dir_search() then walks\n\n\tfor (i = 0; i \u0026lt; le16_to_cpu(entry_list-\u0026gt;de_num_used); i++)\n\t\tdx_entry = \u0026amp;entry_list-\u0026gt;de_entries[i];\n\nover de_num_used entries with no bounds check.  entry_list is either\ndx_leaf-\u0026gt;dl_list (from ocfs2_read_dx_leaf) or, for an inline root,\ndx_root-\u0026gt;dr_entries.  A crafted on-disk image can set de_num_used (and\nde_count, which is the __counted_by_le() bound of de_entries) to 0xffff\nand make the walk read far past the end of the 4KB metadata block, giving\na slab out-of-bounds read reachable from any path lookup, stat() or open()\non an indexed directory once the image is mounted.\n\nCommit 775c17386a6f (\u0026quot;ocfs2: validate dx_root extent list fields during\nblock read\u0026quot;) already bounds dr_list for the non-inline dx_root, but left\nthe inline dr_entries path and the dx_leaf dl_list unchecked.  Add the\nsame read-time validation for both entry lists: de_count must equal the\ncapacity of the block (ocfs2_dx_entries_per_leaf()/per_root()) and\nde_num_used must not exceed de_count, rejecting corrupted metadata with\n-EFSCORRUPTED before ocfs2_dx_dir_search() can walk an out-of-range entry\narray.\n\nde_count is always written as exactly the block capacity when a leaf or\ninline root is formatted, so the equality check does not reject any valid\nimage.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).(CVE-2026-89492)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nqede: Fix NULL pointer dereference in TPA fragment processing\n\nUnder memory pressure, the qede driver encounters NULL pointer\ndereferences when processing TPA continuation fragments.\n\nCommit 8a8633978b84 (\u0026quot;qede: Add build_skb() support.\u0026quot;) accidentally\ndropped the assignment of tpa_info-\u0026gt;buffer.data in qede_tpa_start().\n\nWhen memory pressure causes an SKB allocation failure in qede_tpa_start(),\nthe driver sets tpa_start_fail = true and attempts to recycle the physical\npage later in qede_tpa_end() via qede_reuse_page(). However, because\nbuffer.data was left uninitialized (NULL), qede_reuse_page() pushes a\n\u0026quot;ghost\u0026quot; BD (valid DMA mapping but NULL data pointer) back into the\nactive Rx ring.\n\nThe next time the hardware uses this ring slot, it passes a NULL page\nto qede_fill_frag_skb(), causing a kernel panic.\n\nExample crash from production system:\n BUG: unable to handle kernel NULL pointer dereference at 0x8\n RIP: qede_fill_frag_skb+0x96/0x430 [qede]\n Call Trace:\n   qede_rx_int+0xb06/0x1de0\n   qede_poll+0x2f4/0x6c0\n   __napi_poll+0x2d/0x130\n\nFix the root cause by restoring the tpa_info-\u0026gt;buffer.data assignment\nin qede_tpa_start(), ensuring valid pages are correctly tracked and\nrecycled. Additionally, update the stale comment for\nstruct qede_agg_info::buffer to reflect its current usage.(CVE-2026-89511)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\naudit: avoid dropping live tree ref on fsnotify rule autoremove\n\naudit_del_rule() is used for both netlink deletion templates and internal\nfsnotify autoremove.  The former passes a parsed template which owns a\ntemporary tree reference; the latter passes the installed entry itself.\n\nThe unconditional audit_put_tree() at the end of audit_del_rule() assumes\nthe template case.  For mixed AUDIT_DIR plus AUDIT_EXE rules, an fsnotify\nautoremove event therefore drops the installed rule\u0026apos;s live tree reference.\nRepeating this across rules sharing the same tree can free the tree while\nanother rule still references it, and a later autoremove dereferences the\nfreed pathname while comparing rules.\n\nMove the temporary-tree put to audit_rule_change(), the caller that owns\ndeletion templates.  Keep it in the AUDIT_DEL_RULE cleanup so both\nsuccessful deletion and -ENOENT still release the parser-owned tree.\n\n[PM: dropped unnecessary comment for line length reasons](CVE-2026-89643)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: revoke copy-notify stateids before dropping their reference\n\nCopy-notify stateids live in the s2s_cp_stateids IDR and on their parent\nstid\u0026apos;s sc_cp_list, pinned by a single membership reference.\n_free_cpntf_state_locked() only unlinks an entry once its refcount reaches\nzero, so any revoke path that runs while a concurrent\nfind_cpntf_state()/manage_cpntf_state() holder has elevated cs_count drops\nthe reference without unlinking, leaving the entry discoverable with its\nmembership reference already consumed. A second revoke or a laundromat tick\nthen frees it while the reader still holds the pointer -- a\nKASAN-detectable use-after-free at the reader\u0026apos;s nfs4_put_cpntf_state().\n\nThis affected all three revoke paths:\n\n  - The parent-stid drain (nfs4_free_cpntf_statelist()) repeatedly called\n    _free_cpntf_state_locked() on the first list entry; a holder that had\n    bumped cs_count made it return early, so the next iteration\n    re-decremented and burned the holder\u0026apos;s reference.\n\n  - OFFLOAD_CANCEL (manage_cpntf_state()) and laundromat expiry likewise\n    used _free_cpntf_state_locked() and could drop 2-\u0026gt;1 without unlinking.\n\nAdd revoke_cpntf_state_locked(), which unhashes the entry from the IDR and\nsc_cp_list first (deferring the final free to any holder), and use it from\nall three revoke paths. The drain now walks with list_for_each_entry_safe()\nand revokes each entry unconditionally, so it terminates in one pass per\nentry regardless of cs_count. The unhash is gated on\n!list_empty(\u0026amp;cps-\u0026gt;cp_list); the idr_remove() gate matters because\nidr_alloc_cyclic() may have recycled the so_id by then. Keep\n_free_cpntf_state_locked() for the reference-holder put path only, where a\nconcurrent revoke may already have unlinked the entry (its list_del_init()\nthen a no-op).(CVE-2026-89663)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: gate nfs2 setacl by argp-\u0026gt;mask\n\nThe NFSACL v2 SETACL path shares the decoder convention used by its\nv3 sibling: nfsaclsvc_decode_setaclargs() fills in argp-\u0026gt;acl_access\nonly when NFS_ACL is set in the request mask and argp-\u0026gt;acl_default\nonly when NFS_DFACL is set, leaving the other pointer NULL because\nthe argument buffer is zeroed up to pc_argzero before decode.\n\nnfsacld_proc_setacl() then hands both pointers to set_posix_acl()\nunconditionally. set_posix_acl(idmap, dentry, type, NULL) is the VFS\n\u0026quot;remove this ACL type\u0026quot; operation, so an omitted arm is\nindistinguishable from an explicit request to delete that ACL. A\nSETACL carrying only NFS_ACL silently strips the directory\u0026apos;s default\nACL; mask=0 strips both.\n\nThis is the same defect just fixed in nfsd3_proc_setacl(); apply the\nsame remedy. Gate each set_posix_acl() call on its mask bit and\ninitialize error to 0 so that a request with neither bit set leaves\nthe on-disk ACLs untouched and returns success. The out_drop_lock\npath and the unconditional posix_acl_release() in\nnfsaclsvc_release_setacl() already tolerate the skipped arms.(CVE-2026-89672)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix stale s2s_cp_stateids IDR entry for async COPY\n\nFor an async COPY, nfsd4_copy() called nfs4_init_copy_state() before\ndup_copy_fields(), so the s2s_cp_stateids IDR was pointed at\n\u0026amp;u-\u0026gt;copy-\u0026gt;cp_stateid -- memory in the per-rqstp COMPOUND buffer that is\nreused by the next request. dup_copy_fields() copies only the value into\nasync_copy, so the IDR slot dangled at the transient buffer for the whole\nbackground copy. Any IDR walker then dereferences reused request memory:\nthe laundromat reads cs_type from it and, if the bytes look like an\nexpired NFS4_COPYNOTIFY_STID, follows into\nrefcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has\nthe same exposure via idr_find().\n\nDuplicate the fields first, then register the stateid on the stable\nasync_copy. result-\u0026gt;cb_stateid is unchanged.(CVE-2026-89676)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: validate symlink target length in NFSv4 CREATE\n\nnfsd4_decode_create() accepts an unbounded cr_datalen from the wire for\nNF4LNK symlink targets, allowing a client to force a kmalloc of up to\nthe maximum RPC payload size (several MiB) per COMPOUND op that persists\nuntil compound teardown.  The VFS rejects oversized targets with\nENAMETOOLONG, but the allocation has already occurred.\n\nReject cr_datalen == 0 early with nfserr_inval and cr_datalen greater\nthan NFS4_MAXPATHLEN (PATH_MAX) with nfserr_nametoolong to bound the\nallocation.(CVE-2026-89699)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check\n\nThe header for commit e75b23f9e323 (\u0026quot;nfsd: check d_can_lookup in\nfh_verify of directories\u0026quot;) details the assumption that justified\nadding the WARN_ON_ONCE to nfsd_mode_check(), that assumption is\ninvalid (in the case of NFS reexport).\n\nWhen NFSD exports an NFS filesystem it is very possible for\nnfsd_mode_check() to encounter a @dentry that doesn\u0026apos;t have\ni_op-\u0026gt;lookup (see nfs_fhget()\u0026apos;s NFS_ATTR_FATTR_MOUNTPOINT and\nNFS_ATTR_FATTR_V4_REFERRAL handling, and d_flags_for_inode()).\n\nSo remove nfsd_mode_check()\u0026apos;s WARN_ON_ONCE(). The nfserr_notdir\nreturn on that branch must stay. It guards the subsequent\nlookup_one_unlocked() -\u0026gt; __lookup_slow() path, which calls\ninode-\u0026gt;i_op-\u0026gt;lookup() with no NULL check, so returning nfserr_notdir\nis what keeps a client LOOKUP into such a @dentry from dereferencing\na NULL method pointer.(CVE-2026-89711)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: check truncate permission under inode lock\n\nnfsd_setattr() checks whether a size update needs NFSD_MAY_TRUNC\nbefore it takes inode_lock(). The comparison uses the file size sampled\nby that unlocked read, but the actual ATTR_SIZE update is applied later\nunder inode_lock() by notify_change().\n\nThis leaves a TOCTOU window for append-only files. If a client sends a\nSETATTR that does not shrink the file at the time of the unlocked\nsample, a concurrent append can extend the file before nfsd_setattr()\ntakes inode_lock(). notify_change() then applies a real truncation\nwithout the NFSD_MAY_TRUNC check that rejects IS_APPEND(inode). The VFS\ntruncate syscall paths perform their own append-only checks before\ncalling notify_change(), so NFSD must make this decision against the\nlocked size it is about to change.\n\nSplit the write-count acquisition from the truncation permission check.\nKeep get_write_access() before the locked setattr work, then recheck\nwhether the requested size is below i_size_read(inode) after inode_lock()\nhas been acquired and before notify_change(ATTR_SIZE). This also avoids\nthe plain unlocked inode-\u0026gt;i_size load.(CVE-2026-89713)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature\n\nsensor_hub_get_feature() clamps its return value to the caller\u0026apos;s buffer\nsize, but the copy loop still copies field-\u0026gt;report_size / 8 bytes for\neach report value. A malicious HID descriptor can advertise a large\nfeature field size while an IIO caller supplies a small stack buffer,\nsuch as a single s32, causing an out-of-bounds write.\n\nHID core stores parsed report values in __s32 slots and clamps extracted\nvalues to 32 bits. Reject feature fields that require more than one slot\nper value, guard the total byte count calculation, and clamp each\nper-value copy to the remaining caller buffer.(CVE-2026-89729)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs: fix user path of nested backing files\n\nbacking_file_open() derives the path to be stored in the new backing\nfile from user_file-\u0026gt;f_path.  This is incorrect when user_file itself\nis a backing file, which is the case for nested stacking filesystems,\ne.g. overlayfs mounts where the lowerdir of one overlayfs is the merged\ndirectory of another.  Since commit def3ae83da02 (\u0026quot;fs: store real path\ninstead of fake path in backing file f_path\u0026quot;) the f_path of a backing\nfile holds the real path of the intermediate layer, not the path that\nthe user opened.\n\nCommit 924577e4f6ca (\u0026quot;ovl: Fix nested backing file paths\u0026quot;) fixed this\nfor such configurations by passing file_user_path() from\novl_open_realfile().  However, commit 6af36aeb147a (\u0026quot;lsm: add\nbacking_file LSM hooks\u0026quot;) changed the first argument of\nbacking_file_open() from the user path back to the user file and\nderived the path from user_file-\u0026gt;f_path again, silently re-introducing\nthe problem.\n\nAs a result, files mapped through a nested overlayfs show the wrong\npath in /proc/\u0026lt;pid\u0026gt;/maps and in perf/ftrace mmap records.  For example,\nwith two nested overlayfs mounts:\n\n  mkdir -p /ovl/{lower,upper,work,merged} /ovl/nested\n  echo hello \u0026gt; /ovl/lower/foo\n  mount -t overlay overlay \\\n\t-o lowerdir=/ovl/lower,upperdir=/ovl/upper,workdir=/ovl/work \\\n\t/ovl/merged\n  # at least two lowerdirs are needed when upperdir is nonexistent\n  mount -t overlay overlay \\\n\t-o lowerdir=/ovl/merged:/ovl/lower /ovl/nested\n\nmapping /ovl/nested/foo shows a disconnected path instead of the user\npath:\n\n  # readlink /proc/self/fd/3\n  /ovl/nested/foo\n  # grep foo /proc/self/maps\n  7f6e2c100000-7f6e2c101000 r--s 00000000 00:24 15813027 /foo\n\nThe bogus path is derived from the f_path of the intermediate backing\nfile, whose mount is a private clone that d_path() cannot resolve.\n\nFix this by using file_user_path(), which returns the outermost\nuser-visible path for backing files and falls back to\n\u0026amp;user_file-\u0026gt;f_path for regular files.  This restores the behavior of\ncommit 924577e4f6ca (\u0026quot;ovl: Fix nested backing file paths\u0026quot;) for\noverlayfs and also fixes the same problem for the other\nbacking_file_open() callers, fuse passthrough and erofs ishare, when\ntheir user file is itself a backing file.\n\nbacking_tmpfile_open() has the same pattern but is not affected: it is\nonly called by ovl_create_tmpfile() for the upper layer, and another\noverlayfs is rejected as upperdir by the DCACHE_OP_REAL check in\novl_mount_dir_check(), so its user_file can never be a backing file.(CVE-2026-89768)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nisofs: fix out-of-bounds page array access on empty zisofs block\n\nzisofs_uncompress_block()\u0026apos;s empty-block fast path returns\npcount \u0026lt;\u0026lt; PAGE_SHIFT, ignoring the incoming poffset, unlike the\ndecompression path which returns bytes produced relative to poffset.\nzisofs_fill_pages() uses that return to advance its page cursor, so when\nthe zisofs block size is below PAGE_SIZE and a sub-page block leaves\npoffset partway into a page, a following empty block over-counts and\nadvances pages[] one element past its end, after which\n\u0026quot;if (poffset \u0026amp;\u0026amp; *pages)\u0026quot; reads pages[1] out of bounds.  rock.c only\nrejects a block-size shift \u0026gt; 17, so a crafted \u0026quot;ZF\u0026quot; Rock Ridge record can\nset it below PAGE_SHIFT; the bug is reached by an ordinary read() of a\ncompressed file on such a mounted ISO9660 image.\n\nReturn the byte count relative to poffset and zero only\n[poffset, PAGE_SIZE) of the first page, matching the decompression path.\nThe page-aligned case (poffset == 0) is unaffected.\n\n  BUG: KASAN: slab-out-of-bounds in zisofs_read_folio (fs/isofs/compress.c:290)\n  Read of size 8 at addr ffff88800f5eac48 by task exploit/142\n   zisofs_read_folio (fs/isofs/compress.c:290)\n   read_pages (mm/readahead.c:184)\n   ...\n   filemap_read (mm/filemap.c:2814)\n   vfs_read (fs/read_write.c:574)\n   __x64_sys_pread64 (fs/read_write.c:769)\n   do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n   entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n  The buggy address is located 0 bytes to the right of the\n  allocated 8-byte region in the kmalloc-8 cache(CVE-2026-89778)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm: fix race between partial drm_dev_register() failure and ioctl\n\nIf drm_dev_register() fails after registering a minor (e.g. render minor\nregistered, primary minor fails), userspace could have opened the first\nminor and entered a drm_dev_enter() critical section. Since the\nunplugged flag was never set, the ioctl proceeds while the error path\ntears down device resources.\n\nFix this by introducing drm_dev_synchronize_unplug(), which sets the\nunplugged flag and waits for the SRCU barrier, ensuring all in-flight\ndrm_dev_enter() critical sections complete before cleanup proceeds; call\nit on the error path of drm_dev_register().(CVE-2026-89823)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix cs84xx use-after-free on host teardown\n\nqla84xx_put_chip() drops the last reference to ha-\u0026gt;cs84xx and frees it via\n__qla84xx_chip_release() without clearing ha-\u0026gt;cs84xx. During teardown it ran\nbefore scsi_remove_host(), which is what removes the 84xx_fw_version host\nsysfs attribute. A concurrent read of that attribute in the window between\nthe two calls executes qla24xx_84xx_fw_version_show(), which dereferences\nthe freed ha-\u0026gt;cs84xx, resulting in a use-after-free.\n\nMove qla84xx_put_chip() to after scsi_remove_host() in both\nqla2x00_remove_one() and qla2x00_disable_board_on_pci_error(). Once\nscsi_remove_host() returns, the sysfs attribute is gone and kernfs has\ndrained any in-flight show(), so no reader can touch cs84xx; the put still\nruns before the host and ha are freed.(CVE-2026-89854)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation\n\nha-\u0026gt;msix_count is u16, but ha-\u0026gt;max_req_queues, ha-\u0026gt;max_rsp_queues and\nha-\u0026gt;max_qpairs are u8. Deriving the queue count as\n\u0026quot;ha-\u0026gt;max_req_queues = ha-\u0026gt;msix_count - 1\u0026quot; therefore truncates: a board\n(or a misconfigured/malicious hot-plugged device) advertising 257 MSI-X\nvectors yields msix_count - 1 == 256, which truncates to 0. An MSI-X\ncount of 1 zeroes it as well, and in target mode the subsequent\n\u0026quot;ha-\u0026gt;max_req_queues--\u0026quot; then underflows 0 to 255.\n\nWhen the count is 0, qla2x00_alloc_queues() calls\nkzalloc_objs(struct req_que *, 0), which returns ZERO_SIZE_PTR. That is\nnot NULL, so the allocation check passes and the following\n\u0026quot;ha-\u0026gt;req_q_map[0] = req\u0026quot; dereferences ZERO_SIZE_PTR, corrupting memory\nor crashing the kernel.\n\nAdd qla_calc_queue_count() to clamp the derived value into\n[1, QLA_MAX_QUEUES - 1] so it always fits in u8 and is never zero, and\nuse it at all three derivation sites (qla25xx_iospace_config(),\nqla83xx_iospace_config() and qla24xx_enable_msix()). Also guard the\ntarget-mode decrement so it cannot reintroduce a zero (which would in\nturn underflow max_qpairs).(CVE-2026-89856)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()\n\nIn the format 1 path, the virtual port is located on ha-\u0026gt;vp_list while\nholding vport_slock, but the lock is dropped before vp is used:\nqla_update_host_map() is called and VP_IDX_ACQUIRED/REGISTER_FC4_NEEDED/\nREGISTER_FDMI_NEEDED are set on vp. No reference is taken across that\nwindow, so a concurrent qla24xx_deallocate_vp_id() can tear the vport\ndown and free it, leading to a use-after-free.\n\nTake a vport reference (vref_count) under vport_slock when the matching\nvp is found, and drop it after the last use of\nvp. qla24xx_deallocate_vp_id() waits for vref_count to reach zero before\nunlinking and freeing the vport, so the pointer stays valid. This\nmatches the reference idiom already used by the other ha-\u0026gt;vp_list\ntraversals.(CVE-2026-89861)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix memory corruption by not reinjecting CK machine checks\n\nChannel-subsystem damage machine checks are for the host channel\nsubsystem. The guest channel subsystem is emulated in the userspace VMM.\nThere is no point in forwarding such machine checks into the guest.\n\nThis also simplifies the machine check reinjection and avoids kfree of a\nstack variable as reported by sashiko.  There might be still machine\nchecks that have the ck bit set with another bit (like instruction\ndamage), mask out the CK bit in s390_backup_mcck_info(), like the CP and\nED bits already are.(CVE-2026-89920)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: hyper-v: Clamp stimer deadline to avoid livelock\n\nFix an issue where userspace or the guest can program an Hyper-V\nsynthetic timer to have a deadline in the past via integer overflow,\npreventing the CPU from making progress and triggering an RCU stall.\n\nHyper-V\u0026apos;s SynIC exposes 4 per-vCPU synthetic timers to the\nguest, which are emulated by KVM. Each is programmed through the\nHV_X64_MSR_STIMERi_CONFIG and HV_X64_MSR_STIMERi_COUNT MSRs. Depending\non CONFIG, COUNT represents either the absolute expiration time or the\nperiod of a periodic timer, both expressed in 100ns ticks. These timers\nmay be set both by the guest (WRMSR) and the host (KVM_SET_MSRS).\n\nWhen the timer is enabled, stimer_start() translates COUNT to an\nabsolute monotonic deadline and arms an hrtimer. If COUNT is set to a\nvalue close to U64_MAX, the deadline calculation can overflow.\n\n    ktime_add_ns(ktime_now, 100 * (stimer-\u0026gt;exp_time - time_now))\n\nThis can result in a CPU livelock. stimer_start() arms the timer\nvia hrtimer_start() with a deadline in the past, which causes it to\nimmediately fire. The stimer callback then raises KVM_RQ_HV_STIMER, with\nthe intention of causing KVM to deliver a synthetic interrupt on the\nnext vCPU guest enter.\n\nThen, once userspace issues KVM_RUN, vcpu_enter_guest() consumes the\nrequest, calling kvm_hv_process_stimers(). This would normally disable\nthe timer via stimer_expiration() once the deadline is in the past.\nHowever, the deadline comparison is done between the KVM reference\ncounter and stime-\u0026gt;exp_time, which is a big value close to U64_MAX, so\nthis never happens for a few thousand years.\n\nkvm_hv_process_timers() then re-arms the timer via stimer_start(), since\nit was not disabled, which again fires immediately. Before entering\nthe guest, kvm_vcpu_exit_request() checks kvm_request_pending(),\nwhich returns true due to the newly raised KVM_REQ_HV_STIMER. Then\nvcpu_enter_guest() aborts the guest entry, returning early into\nvcpu_run(), which loops back again into vcpu_enter_guest(), restarting\nthe cycle.\n\nSince there are no manual yields in this loop, a task with SCHED_FIFO\nmay starve RCU grace-period kthreads, which exposes the stalls found\nby syzcaller:\n\n    rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:\n    rcu:    (detected by 1, t=10502 jiffies, g=14269, q=1142 ncpus=2)\n    rcu: All QSes seen, last rcu_preempt kthread activity 10500 (4294965239-4294954739), jiffies_till_next_fqs=1, root -\u0026gt;qsmask 0x0\n    rcu: rcu_preempt kthread starved for 10500 jiffies! g14269 f0x2 RCU_GP_WAIT_FQS(5) -\u0026gt;state=0x0 -\u0026gt;cpu=0\n    rcu:    Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.\n        ( ... )\n    Call Trace:\n     \u0026lt;IRQ\u0026gt;\n     __run_hrtimer kernel/time/hrtimer.c:1773 [inline]\n     __hrtimer_run_queues+0x408/0xc30 kernel/time/hrtimer.c:1841\n     hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1903\n     local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline]\n     __sysvec_apic_timer_interrupt+0x102/0x3e0 arch/x86/kernel/apic/apic.c:1062\n     instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]\n     sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1056\n     \u0026lt;/IRQ\u0026gt;\n     \u0026lt;TASK\u0026gt;\n     asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697\n    RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]\n    RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194\n    Code: 74 05 e8 0b f4 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 \u0026lt;e8\u0026gt; 23 6b 27 f6 65 8b 05 7c 60 5a 07 85 c0 74 40 48 c7 04 24 0e 36\n    RSP: 0018:ffffc900040a7320 EFLAGS: 00000206\n    RAX: 5de15cb931505900 RBX: 0000000000000a06 RCX: 5de15cb931505900\n    RDX: 0000000000000007 RSI: ffffffff8daa9dc3 RDI: 0000000000000001\n    RBP: ffffc900040a73b0 R08: ffffffff8fc3d0\n---truncated---(CVE-2026-89927)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nVMX: Always flush vpid02 on first use\n\nMake sure vpid02 is always flushed on first use by setting last_vpid=0\nwhen allocating vpid02.  nested_vmx_transition_tlb_flush() will always\ndetect a VPID change on first VM-Enter after VMXON, because VPID=0 in\nvmcs12 is not allowed if L1 enables VPID.\n\nThis avoids using stale TLB entries from a previous lifetime of the\nVPID, that might have been associated with a different vCPU (or a\ncompletely different VM).\n\nNote that last_vpid is already being initialized as 0 when the vCPU is\ncreated, but it is not reset when vpid02 is freed on VMXOFF. Hence, the\nproblem can only occur if L1 does VMXOFF -\u0026gt; VMXON, runs an L2, and KVM\nhappens to reuse a VPID that has TLB entries on the physical CPU.(CVE-2026-89932)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvdimm/btt: reject an arena whose nfree is below the lane count\n\nThe BTT info block\u0026apos;s nfree field, the number of reserve free blocks, is\nread from the medium without validation.  btt_freelist_init() and\nbtt_rtt_init() size the per-lane freelist[] and rtt[] arrays by nfree,\nbut the I/O path indexes them by the lane from nd_region_acquire_lane(),\nwhich is bounded by nd_region-\u0026gt;num_lanes (ND_MAX_LANES), not by nfree.\nA crafted or foreign arena whose nfree is below the lane count makes\nfreelist[lane]/rtt[lane] run past the allocation: an out-of-bounds write.\n\nbtt.rst documents the nlanes = min(nfree, num_cpus) invariant, which the\ncode does not currently honor: num_lanes is ND_MAX_LANES regardless of\nnfree.  Reject an arena whose nfree is below num_lanes at discovery,\nbefore the per-lane arrays are allocated, enforcing that invariant.(CVE-2026-89965)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: check the data direction of a C2HData PDU\n\nnvme_tcp_handle_c2h_data() finds the request by command id and checks\nthat it has a payload, but it does not check that the command asked for\ndata to be read.  A controller that answers a write command with C2HData\ntherefore reaches nvme_tcp_recv_data(), where _copy_to_iter() hits\nWARN_ON_ONCE(i-\u0026gt;data_source) and returns 0.  The receive path turns that\ninto -EFAULT and resets the controller.\n\nNo data is copied, so this is not memory corruption.  What a controller\ngets is a kernel warning it can raise at will, which is fatal on a host\nbooted with panic_on_warn.\n\nThe send path already knows the direction - it consults rq_data_dir()\nwhen it builds a command - and nvme_tcp_handle_r2t() checks the length\nand the offset of the request it names.  The C2HData path does not check\nthe direction at all.\n\nReject a C2HData PDU whose command is not a read.  Rejecting it fails\nthe command and resets the controller, as the neighbouring check in this\nfunction does; what goes away is the warning.\n\n  [    6.885580] ------------[ cut here ]------------\n  [    6.886457] WARNING: lib/iov_iter.c:193 at _copy_to_iter+0x289/0x1330, CPU#0: kworker/0:1H/71\n  [    6.888137] CPU: 0 UID: 0 PID: 71 Comm: kworker/0:1H Not tainted 7.2.0-rc5-NVMETCP-gf5098b6bae76 #1 PREEMPT(lazy)\n  [    6.891165] Workqueue: nvme_tcp_wq nvme_tcp_io_work\n  [    6.891875] RIP: 0010:_copy_to_iter+0x289/0x1330\n  [    6.903739] Call Trace:\n  [    6.904085]  \u0026lt;TASK\u0026gt;\n  [    6.909254]  __skb_datagram_iter+0x433/0x820\n  [    6.911026]  skb_copy_datagram_iter+0x37/0x120\n  [    6.911622]  nvme_tcp_recv_skb+0xa07/0x4320\n  [    6.913378]  __tcp_read_sock+0x1ab/0x810\n  [    6.915788]  nvme_tcp_try_recv+0x152/0x1e0\n  [    6.918222]  nvme_tcp_io_work+0x1e4/0x6c0\n  [    6.926906]  \u0026lt;/TASK\u0026gt;\n  [    6.927226] ---[ end trace 0000000000000000 ]---\n  [    6.927878] nvme nvme0: queue 1 failed to copy request 0x71 data\n  [    6.928709] nvme nvme0: receive failed:  -14(CVE-2026-89973)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndma-direct: return struct page from dma_direct_alloc_from_pool()\n\nCommit 5b138c534fda (\u0026quot;dma-direct: factor out a dma_direct_alloc_from_pool\nhelper\u0026quot;) changed dma_direct_alloc_from_pool() to return the CPU address\nfrom dma_alloc_from_pool(). That fits dma_direct_alloc(), but\ndma_direct_alloc_pages() also uses the helper and expects a struct page *.\n\nFix this by making dma_direct_alloc_from_pool() return the struct page *\nagain, and pass the CPU address back through an out-parameter for the\ndma_direct_alloc() caller.(CVE-2026-89995)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: ucsi: displayport: Fix OOB altmode array index\n\nThe UCSI displayport driver indexes the connector\u0026apos;s port altmode array\nwith the GET_CURRENT_CAM response after checking it is not 0xff. The\nport altmode array is UCSI_MAX_ALTMODES elements long. If the PPM\nreturns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and\nnot equal to 0xff, the kernel may crash with an array index OOB error.\n\nUpdate the UCSI displayport driver to verify the current cam is less\nthan UCSI_MAX_ALTMODES before accessing the port altmode array.(CVE-2026-90025)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/pnfs: key the data server cache on the NFS version\n\nnfs4_pnfs_ds_add() keys the per-net data server cache on the multipath\naddress set alone, and struct nfs4_pnfs_ds records no version. That\nsuffices for the files layout driver, which always connects with version\n4, but flexfiles takes its version tuple from GETDEVICEINFO per device,\nand one address can legitimately serve both NFSv3 and NFSv4.\n\nTwo deviceids on one address with different ds_versions[0].version\ntherefore share a single nfs4_pnfs_ds, and whichever mirror connects\nfirst pins ds_clp to its own version. The other one is handed that\nclient anyway, so it selects rpc_call_ops for a version the connection\ndoes not speak, and the mismatched sequence-slot handling dereferences\nNULL.\n\nAdd the version to the cache key so the two cannot alias, giving each\nversion its own nfs4_pnfs_ds and connection while both mirrors stay\nusable. Only the major version is compared, since that is what selects\nrpc_call_ops and rpc_ops; v4.0 and v4.1 keep sharing a client. The files\nlayout driver passes the 4 it already hardcodes at connect time.(CVE-2026-90102)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Return a delegation the client fails to record\n\nWhen an NFS server grants a delegation in an OPEN reply,\nnfs_inode_set_delegation() records it on the client. However, three\nof its error flows return without sending DELEGRETURN.\n\nA delegation can be relinquished only by DELEGRETURN (RFC 8881\nSection 20.2.4), so dropping one silently leaves the server believing\nthe client still holds it. If the server happens to recall that\ndelegation, the client answers CB_RECALL with NFS4ERR_BADHANDLE\nbecause it has no record of the stateid. The server revokes the\ndelegation and moves it onto its cl_revoked list, because the client\nnever sends the FREE_STATEID that would drain it. Every subsequent\nSEQUENCE reply then carries SEQ4_STATUS_RECALLABLE_STATE_REVOKED,\nand the client\u0026apos;s state manager loops issuing TEST_STATEID across its\ndelegations without ever clearing the condition.\n\nThe window is easy to reach now that a server offers a write\ndelegation on any write OPEN: a delegation recalled for one opener\nraces a re-open that the server answers with a fresh write\ndelegation.\n\nInstead of dropping it, hand the delegation back during these error\nflows.(CVE-2026-90234)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/omap: dsi: Do not copy isr table\n\nTo be able to unregister stuff from isrs, the corresponding table was\ncopied.  Nobody seems to unregister stuff that way, so it does not help.\nBut there are stack-allocated objects passed to these isrs giving chances\nof UAF of these objects if irqs are unregistered while they are handled,\nso better do not copy that table.(CVE-2026-90316)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: synchronize input before cleaning up a failed probe\n\nhid_device_io_start() allows reports to run concurrently with probe. If\nthe probe subsequently fails, __hid_device_probe() releases driver\nresources and clears hdev-\u0026gt;driver without first excluding those report\ncallbacks.\n\nFor example, a report may enter hidraw_report_event() while the failure\npath frees the associated hidraw object, leading to a use-after-free when\nthe report takes the object\u0026apos;s list lock.\n\nStop input before performing failed-probe cleanup. This reacquires\ndriver_input_lock and waits for any report callback already in progress.(CVE-2026-90329)","status":"published","published":"2026-10-16T11:59:44Z","modified":"2026-10-16T12:15:15.099429143Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:71602","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2026-09-25T10:15:36Z","modified":"2026-10-16T10:24:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:75746","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2026-10-06T10:19:03Z","modified":"2026-10-17T10:19:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:75747","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2026-10-06T10:19:04Z","modified":"2026-10-17T10:19:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76739","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2026-10-10T10:21:57Z","modified":"2026-10-20T10:15:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:71602","title":"Important: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: fbcon: Set fb_display[i]-\u003emode to NULL when the mode is released (CVE-2025-40323)\n\n* kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)\n\n* kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)\n\n* kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)\n\n* kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)\n\n* kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)\n\n* kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230)\n\n* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204)\n\n* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199)\n\n* kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311)\n\n* kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005)\n\n* kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203)\n\n* kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290)\n\n* kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098)\n\n* kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121)\n\n* kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)\n\n* kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257)\n\n* kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267)\n\n* kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266)\n\n* kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273)\n\n* kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714)\n\n* kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n\nBug Fix(es) and Enhancement(s):\n\n* Bypass DMA APIs for coherent allocations for pre-mapped memory [rhel-10.2.z] (JIRA:Rocky Linux-252331)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-26T12:11:25.03969Z","modified":"2026-09-26T12:45:02.57922406Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:75746","title":"Important: kernel-rt security, bug fix, and enhancement update","description":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)\n\n* kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)\n\n* kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)\n\n* kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)\n\n* kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)\n\n* kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)\n\n* kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)\n\n* kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)\n\n* kernel: gfs2: add some missing log locking (CVE-2026-53049)\n\n* kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)\n\n* kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)\n\n* kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)\n\n* kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)\n\n* kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)\n\n* kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)\n\n* kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994)\n\n* kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)\n\n* kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)\n\n* kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)\n\n* kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)\n\n* kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)\n\n* kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)\n\n* kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)\n\n* kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)\n\n* kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)\n\n* kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n\n* kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)\n\n* kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)\n\n* kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)\n\nBug Fix(es) and Enhancement(s):\n\n* Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)\n\n* Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)\n\n* [nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-06T06:02:31.78498Z","modified":"2026-10-06T06:45:02.559355042Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:75747","title":"Important: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)\n\n* kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)\n\n* kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)\n\n* kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)\n\n* kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)\n\n* kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)\n\n* kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)\n\n* kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)\n\n* kernel: gfs2: add some missing log locking (CVE-2026-53049)\n\n* kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)\n\n* kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)\n\n* kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)\n\n* kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)\n\n* kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)\n\n* kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)\n\n* kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994)\n\n* kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)\n\n* kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)\n\n* kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)\n\n* kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)\n\n* kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)\n\n* kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)\n\n* kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)\n\n* kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)\n\n* kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)\n\n* kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n\n* kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)\n\n* kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)\n\n* kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)\n\nBug Fix(es) and Enhancement(s):\n\n* Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)\n\n* Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)\n\n* [nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-06T06:01:13.392384Z","modified":"2026-10-06T06:45:02.58199412Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-89481","description":"In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_r2t() does not check the direction of the request the R2T refers to. A malicious controller can send an R2T for a READ and the host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the H2CData header and nvme_tcp_try_send_data() sends the request's data buffer. That buffer is the READ destination, so its contents go to the controller. The command then completes normally and nothing is logged. Against a test controller that answers every READ with an R2T, a 4096 byte buffered read returned all 4096 bytes, split over two R2Ts. The pages contained stale kernel data, including an array of struct page pointers. Reject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T20:19:00Z","modified":"2026-11-06T20:15:23.270662696Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-06T20:53:12.329135Z"},{"id":"ALSA-2026:71602","title":"Important: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.  \n\nSecurity Fix(es):  \n\n  * kernel: fbcon: Set fb_display[i]-\u003emode to NULL when the mode is released (CVE-2025-40323)\n  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)\n  * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)\n  * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)\n  * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)\n  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)\n  * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230)\n  * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204)\n  * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199)\n  * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311)\n  * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005)\n  * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203)\n  * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290)\n  * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098)\n  * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121)\n  * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)\n  * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257)\n  * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267)\n  * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266)\n  * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273)\n  * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714)\n  * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Bypass DMA APIs for coherent allocations for pre-mapped memory [almalinux-10.2.z] (JIRA:AlmaLinux-252331)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-24T00:00:00Z","modified":"2026-10-29T11:30:51.2527511Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:75746","title":"Important: kernel-rt security, bug fix, and enhancement update","description":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.  \n\nSecurity Fix(es):  \n\n  * kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)\n  * kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)\n  * kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)\n  * kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)\n  * kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)\n  * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)\n  * kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)\n  * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)\n  * kernel: gfs2: add some missing log locking (CVE-2026-53049)\n  * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)\n  * kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)\n  * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)\n  * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)\n  * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)\n  * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)\n  * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994)\n  * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)\n  * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)\n  * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)\n  * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)\n  * kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)\n  * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)\n  * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)\n  * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)\n  * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)\n  * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n  * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)\n  * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)\n  * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)\n  * AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)\n  * [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:02:29.620629301Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:75747","title":"Important: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.  \n\nSecurity Fix(es):  \n\n  * kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)\n  * kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)\n  * kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)\n  * kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)\n  * kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)\n  * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)\n  * kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)\n  * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)\n  * kernel: gfs2: add some missing log locking (CVE-2026-53049)\n  * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)\n  * kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)\n  * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)\n  * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)\n  * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)\n  * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)\n  * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994)\n  * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)\n  * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)\n  * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)\n  * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)\n  * kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)\n  * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)\n  * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)\n  * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)\n  * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)\n  * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n  * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)\n  * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)\n  * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)\n  * AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)\n  * [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:02:29.850825329Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-100646","title":"CVE-2026-89481 affecting package kernel for versions less than 6.6.157.1-1","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.","status":"published","published":"2026-09-11T20:19:29Z","modified":"2026-10-02T14:15:17.368181063Z","updated_at":"2026-11-02T15:28:00.253976Z"},{"id":"CLSA-2026-1791132991","title":"Fix of 400 CVEs","description":"   * CVE-2026-53266\n     - netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}\n   * CVE-2025-39964\n     - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n       {CVE-2025-39964}\n   * CVE-2025-39827\n     - net: rose: include node references in rose_neigh refcount {CVE-2025-39827}\n   * CVE-2026-93140\n     - udf: Mark LVID buffer as uptodate before marking it dirty {CVE-2026-93140}\n   * CVE-2026-90112\n     - net: qlcnic: validate unified ROM sections before loading {CVE-2026-90112}\n   * CVE-2026-90237\n     - netfilter: nft_ct: move custom expectation support to helper\n       {CVE-2026-90237}\n   * CVE-2026-93051\n     - misc: ad525x_dpot: use driver core groups for sysfs files {CVE-2026-93051}\n   * CVE-2026-90379\n     - wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash\n       {CVE-2026-90379}\n   * CVE-2026-90302\n     - ocfs2: synchronize heartbeat callbacks with o2net teardown\n       {CVE-2026-90302}\n   * CVE-2026-90383\n     - misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}\n   * CVE-2026-90320\n     - ocfs2: validate external xattr entries when reading metadata\n       {CVE-2026-90320}\n   * CVE-2026-93047\n     - drm/v3d: Associate BOs with every job that accesses them {CVE-2026-93047}\n   * CVE-2026-93192\n     - drm/v3d: Clear queue-\u003eactive_job when v3d_fence_create() fails\n       {CVE-2026-93192}\n   * CVE-2026-93050\n     - ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on\n       remove {CVE-2026-93050}\n   * CVE-2026-90311\n     - thermal: hwmon: Remove hwmon class device along with its parent\n       {CVE-2026-90311}\n   * CVE-2026-93191\n     - smack: fix incorrect task context in smack_msg_queue_msgrcv\n       {CVE-2026-93191}\n   * CVE-2026-93042\n     - dmaengine: dw-edma: Terminate all descriptors without callbacks\n       {CVE-2026-93042}\n   * CVE-2026-93056\n     - usb: gadget: f_uac1_legacy: remove broken string configfs attributes\n       {CVE-2026-93056}\n   * CVE-2026-93203\n     - batman-adv: bla: avoid CRC corruption due to parallel claim add\n       {CVE-2026-93203}\n   * CVE-2026-93204\n     - batman-adv: dat: atomically update mac addresses {CVE-2026-93204}\n   * CVE-2026-90000\n     - HID: rmi: fix OOB access with undersized RMI reports {CVE-2026-90000}\n   * CVE-2026-90431\n     - remoteproc: Prevent crash handling to race with rproc_del()\n       {CVE-2026-90431}\n   * CVE-2026-93202\n     - i3c: master: Fix recursive locking during device registration\n       {CVE-2026-93202}\n   * CVE-2026-90347\n     - arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry\n       {CVE-2026-90347}\n   * CVE-2026-90267\n     - scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails\n       {CVE-2026-90267}\n   * CVE-2026-92500\n     - ext4: use fsdata to track inline data write state and fix race\n       {CVE-2026-92500}\n   * CVE-2026-93196\n     - nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196}\n   * CVE-2026-90207\n     - ALSA: seq: midi: Serialize input teardown with event_input\n       {CVE-2026-90207}\n   * CVE-2026-90307\n     - RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ\n       {CVE-2026-90307}\n   * CVE-2026-90110\n     - inetpeer: randomize RB-tree node comparison using SipHash {CVE-2026-90110}\n   * CVE-2026-90293\n     - IB/isert: post the full-feature receive buffers after session registration\n       {CVE-2026-90293}\n   * CVE-2026-89838\n     - f2fs: limit recovery filename logging to stored length {CVE-2026-89838}\n   * CVE-2026-93177\n     - drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup\n       {CVE-2026-93177}\n   * CVE-2026-89823\n     - drm: fix race between partial drm_dev_register() failure and ioctl\n       {CVE-2026-89823}\n   * CVE-2026-90041\n     - HID: sony: clean up device list on probe failure {CVE-2026-90041}\n   * CVE-2026-90015\n     - xhci: fix lost bounce buffers on TDs spanning several ring segments\n       {CVE-2026-90015}\n   * CVE-2026-93095\n     - hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}\n   * CVE-2026-92522\n     - ACPI: processor: validate MADT IOAPIC entry bounds {CVE-2026-92522}\n   * CVE-2026-90328\n     - HID: steam: Reject short reads {CVE-2026-90328}\n   * CVE-2026-92481\n     - pinctrl: mediatek: free EINT resources on unbind {CVE-2026-92481}\n   * CVE-2026-90421\n     - PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}\n   * CVE-2026-89952\n     - mtd: rawnand: validate ONFI extended parameter page sections\n       {CVE-2026-89952}\n   * CVE-2026-89927\n     - KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock\n       {CVE-2026-89927}\n   * CVE-2026-90245\n     - fbdev: kyro: Validate overlay viewport coordinates {CVE-2026-90245}\n   * CVE-2026-90102\n     - NFSv4/pnfs: key the data server cache on the NFS version {CVE-2026-90102}\n   * CVE-2026-93178\n     - drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup\n       {CVE-2026-93178}\n   * CVE-2026-92480\n     - scsi: ufs: core: Validate string descriptors {CVE-2026-92480}\n   * CVE-2026-90106\n     - net: bridge: arp/nd proxy: fix reading neigh ha {CVE-2026-90106}\n   * CVE-2026-89847\n     - scsi: qla2xxx: Avoid double completion in async IOCB timeout\n       {CVE-2026-89847}\n   * CVE-2026-90036\n     - NFSD: Prevent client use-after-free during blocked-lock reaping\n       {CVE-2026-90036}\n   * CVE-2026-93179\n     - drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read\n       {CVE-2026-93179}\n   * CVE-2026-89856\n     - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation\n       {CVE-2026-89856}\n   * CVE-2026-92482\n     - pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip\n       {CVE-2026-92482}\n   * CVE-2026-90294\n     - IB/isert: delay the final Login Response until the session is registered\n       {CVE-2026-90294}\n   * CVE-2026-92499\n     - ext4: validate readdir offset before accessing dirent {CVE-2026-92499}\n   * CVE-2026-90150\n     - pnfs/blocklayout: Fix device leaks on parse failure {CVE-2026-90150}\n   * CVE-2026-90222\n     - nfc: pn533: hold a reference to the request skb during send_frame\n       {CVE-2026-90222}\n   * CVE-2026-90235\n     - sunrpc: xprtsock: annotate shared socket callbacks with\n       READ_ONCE/WRITE_ONCE {CVE-2026-90235}\n   * CVE-2026-90105\n     - vxlan: fix reading neigh ha {CVE-2026-90105}\n   * CVE-2026-93172\n     - mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug\n       {CVE-2026-93172}\n   * CVE-2026-90149\n     - NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers\n       {CVE-2026-90149}\n   * CVE-2026-90248\n     - net/sched: cls_api: fix teardown of an adopted proto on insert-race loss\n       {CVE-2026-90248}\n   * CVE-2026-90196\n     - ASoC: SOF: validate topology volume range before allocation\n       {CVE-2026-90196}\n   * CVE-2026-90234\n     - NFS: Return a delegation the client fails to record {CVE-2026-90234}\n   * CVE-2026-90298\n     - drm/sun4i: tcon: Drop TCON TOP device reference {CVE-2026-90298}\n   * CVE-2026-93151\n     - nvmet-rdma: fix response resource leak on queue teardown {CVE-2026-93151}\n   * CVE-2026-90259\n     - btrfs: qgroup: fix a wrong length calculation in\n       qgroup_free_reserved_data() {CVE-2026-90259}\n   * CVE-2026-89881\n     - media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA\n       leak {CVE-2026-89881}\n   * CVE-2026-90418\n     - nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch\n       {CVE-2026-90418}\n   * CVE-2026-93053\n     - speakup: keyhelp: guard letter_offsets possible out-of-range indexing\n       {CVE-2026-93053}\n   * CVE-2026-90314\n     - remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()\n       {CVE-2026-90314}\n   * CVE-2026-92498\n     - wifi: ath6kl: avoid buffer overreads in WMI event handlers\n       {CVE-2026-92498}\n   * CVE-2026-93039\n     - ASoC: meson: Keep link pointers valid on realloc failure {CVE-2026-93039}\n   * CVE-2026-89936\n     - iio: dac: m62332: Fix regulator reference count imbalance {CVE-2026-89936}\n   * CVE-2026-89901\n     - media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL\n       deref {CVE-2026-89901}\n   * CVE-2026-89848\n     - scsi: qla2xxx: Quiesce response IRQ before freeing request queue\n       {CVE-2026-89848}\n   * CVE-2026-90303\n     - ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults\n       {CVE-2026-90303}\n   * CVE-2026-90187\n     - null_blk: free zones array on device power-off {CVE-2026-90187}\n   * CVE-2026-90151\n     - NFSv4: remove callback IDR entry on client allocation failure\n       {CVE-2026-90151}\n   * CVE-2026-90125\n     - smb: client: fix request buffer leak in smb2_new_read_req()\n       {CVE-2026-90125}\n   * CVE-2026-89840\n     - f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}\n   * CVE-2026-90160\n     - lwt_bpf: Restore reserved headroom after xmit program {CVE-2026-90160}\n   * CVE-2026-92525\n     - RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[]\n       {CVE-2026-92525}\n   * CVE-2026-90315\n     - PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers\n       {CVE-2026-90315}\n   * CVE-2026-90414\n     - IB/isert: reject PDUs declaring more data than was received\n       {CVE-2026-90414}\n   * CVE-2026-93117\n     - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}\n   * CVE-2026-90062\n     - netfilter: nf_tables: move hardware offload step after building the chain\n       blob {CVE-2026-90062}\n   * CVE-2026-90214\n     - ASoC: xilinx: formatter_pcm: fix stream_data leak on open error\n       {CVE-2026-90214}\n   * CVE-2026-89946\n     - ASoC: cs35l33: drain threaded IRQ before runtime suspend {CVE-2026-89946}\n   * CVE-2026-89945\n     - ASoC: cs35l34: drain threaded IRQ before runtime suspend {CVE-2026-89945}\n   * CVE-2026-90194\n     - ACPI: scan: fix bus ID cleanup on device_add() failures {CVE-2026-90194}\n   * CVE-2026-93037\n     - RDMA/hfi1: Propagate sdma_txinit_ahg() errors {CVE-2026-93037}\n   * CVE-2026-89938\n     - iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove\n       UAF {CVE-2026-89938}\n   * CVE-2026-89999\n     - HID: wacom: validate report length in wacom_intuos_pro2_bt_irq\n       {CVE-2026-89999}\n   * CVE-2026-93170\n     - dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and\n       MCDMA interrupt handlers {CVE-2026-93170}\n   * CVE-2026-89846\n     - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read\n       {CVE-2026-89846}\n   * CVE-2026-89813\n     - drm/amdgpu: force complete the KIQ ring fences on reset {CVE-2026-89813}\n   * CVE-2026-89913\n     - KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables\n       {CVE-2026-89913}\n   * CVE-2026-89864\n     - scsi: qla2xxx: Bound i2c-\u003elength in I2C bsg handlers {CVE-2026-89864}\n   * CVE-2026-92524\n     - irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()\n       {CVE-2026-92524}\n   * CVE-2026-90032\n     - media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}\n   * CVE-2026-89929\n     - KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU\n       {CVE-2026-89929}\n   * CVE-2026-90386\n     - i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices\n       {CVE-2026-90386}\n   * CVE-2026-90225\n     - nfc: llcp: read llcp_sock-\u003elocal under the socket lock in getsockopt\n       {CVE-2026-90225}\n   * CVE-2026-90138\n     - vsock: don't check the listener's sk_err in vsock_accept()\n       {CVE-2026-90138}\n   * CVE-2026-93040\n     - dmaengine: dw-edma: Serialize channel state checks {CVE-2026-93040}\n   * CVE-2026-90141\n     - ipvs: fix integer overflow in ftp helper port/address parsing\n       {CVE-2026-90141}\n   * CVE-2026-89932\n     - KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}\n   * CVE-2026-89890\n     - media: go7007: defer the ALSA v4l2 put until card release {CVE-2026-89890}\n   * CVE-2026-89948\n     - batman-adv: bla: fix freeing of claims on meshif deletion {CVE-2026-89948}\n   * CVE-2026-89865\n     - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers\n       {CVE-2026-89865}\n   * CVE-2026-89843\n     - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak\n       {CVE-2026-89843}\n   * CVE-2026-90180\n     - block: mtip32xx: synchronize ioctls with device removal {CVE-2026-90180}\n   * CVE-2026-90227\n     - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() {CVE-2026-90227}\n   * CVE-2026-89883\n     - media: rc: sunxi-cir: Unregister rc device on probe failure\n       {CVE-2026-89883}\n   * CVE-2026-89912\n     - KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save\n       {CVE-2026-89912}\n   * CVE-2026-93175\n     - drm/amd/display: Fix dangling pointer in CRTC reset function\n       {CVE-2026-93175}\n   * CVE-2026-90109\n     - net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue\n       {CVE-2026-90109}\n   * CVE-2026-90058\n     - net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup\n       {CVE-2026-90058}\n   * CVE-2026-93188\n     - HID: roccat: bound device-supplied profile index {CVE-2026-93188}\n   * CVE-2026-90057\n     - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()\n       {CVE-2026-90057}\n   * CVE-2026-89949\n     - batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}\n   * CVE-2026-89965\n     - nvdimm/btt: reject an arena whose nfree is below the lane count\n       {CVE-2026-89965}\n   * CVE-2026-89854\n     - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}\n   * CVE-2026-89968\n     - nvmet-tcp: reject unsolicited H2CData PDUs {CVE-2026-89968}\n   * CVE-2026-89871\n     - media: video-i2c: fix kthread error pointer left in kthread_vid_cap on\n       failure {CVE-2026-89871}\n   * CVE-2026-89897\n     - media: cec: Serialize exclusive follower delivery {CVE-2026-89897}\n   * CVE-2026-89877\n     - media: saa7164: fix cleanup on resource allocation failure\n       {CVE-2026-89877}\n   * CVE-2026-93189\n     - HID: core: quiesce input in hid_hw_stop() to prevent use-after-free\n       {CVE-2026-93189}\n   * CVE-2026-90053\n     - net/sched: sch_htb: limit htb_classify inner-class filter hops\n       {CVE-2026-90053}\n   * CVE-2026-90182\n     - blk-iocost: clear delay state when freeing policy data {CVE-2026-90182}\n   * CVE-2026-89954\n     - mtd: afs: validate v2 image info bounds {CVE-2026-89954}\n   * CVE-2026-89858\n     - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()\n       {CVE-2026-89858}\n   * CVE-2026-89973\n     - nvme-tcp: check the data direction of a C2HData PDU {CVE-2026-89973}\n   * CVE-2026-90419\n     - nilfs2: prevent out-of-bounds read in super root block parsing\n       {CVE-2026-90419}\n   * CVE-2026-90075\n     - net/sched: fq_codel: clamp default quantum and mtu {CVE-2026-90075}\n   * CVE-2026-90416\n     - RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs\n       {CVE-2026-90416}\n   * CVE-2026-90226\n     - nfc: llcp: avoid userspace overflow on invalid optlen {CVE-2026-90226}\n   * CVE-2026-90076\n     - net/sched: fq: add overflow bounds to quantum and initial quantum\n       {CVE-2026-90076}\n   * CVE-2026-90056\n     - net: fec: only stop PTP if it was initialized {CVE-2026-90056}\n   * CVE-2026-90411\n     - nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request\n       {CVE-2026-90411}\n   * CVE-2026-93159\n     - crypto: atmel-sha204a - fix heap info leak on I2C transfer failure\n       {CVE-2026-93159}\n   * CVE-2026-90360\n     - regulator: core: use system_freezable_wq for init complete work\n       {CVE-2026-90360}\n   * CVE-2026-90403\n     - wifi: rtlwifi: pci: fix error path in rtl_pci_probe() {CVE-2026-90403}\n   * CVE-2026-89879\n     - media: s2255: bound JPEG frame size before copying into the buffer\n       {CVE-2026-89879}\n   * CVE-2026-89821\n     - drm/amd/display: avoid divide-by-zero in __is_lut_linear()\n       {CVE-2026-89821}\n   * CVE-2026-53176\n     - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN {CVE-2026-53176}\n   * CVE-2026-92509\n     - RDMA/core: Fix potential use after free in counter_release()\n       {CVE-2026-92509}\n   * CVE-2026-93163\n     - hwrng: core - fix rng list on registration error {CVE-2026-93163}\n   * CVE-2026-90055\n     - usb: atm: usbatm: fix invalid ci_range initialization {CVE-2026-90055}\n   * CVE-2026-90088\n     - Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite\n       loop {CVE-2026-90088}\n   * CVE-2026-90318\n     - fat: release buffer head after rebuilding parent {CVE-2026-90318}\n   * CVE-2026-90126\n     - rtc: pcf8563: fix clock provider leak on unbind {CVE-2026-90126}\n   * CVE-2026-90345\n     - wifi: brcmfmac: fix P2P action frame handling without device vif\n       {CVE-2026-90345}\n   * CVE-2026-90073\n     - net/sched: hhf: clamp quantum before hhf_change() to avoid overflow\n       {CVE-2026-90073}\n   * CVE-2026-90263\n     - btrfs: check if root is readonly when setting posix acl {CVE-2026-90263}\n   * CVE-2026-90334\n     - tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}\n   * CVE-2026-93104\n     - RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}\n   * CVE-2026-90216\n     - ubi: Fix rollback for explicit UBI device numbers {CVE-2026-90216}\n   * CVE-2026-93120\n     - usb: gadget: configfs: fix out-of-bounds read of qw_sign {CVE-2026-93120}\n   * CVE-2026-89876\n     - media: tda18250: fix possible integer overflow {CVE-2026-89876}\n   * CVE-2026-89887\n     - media: i2c: ov7740: fix use-after-destroy in remove {CVE-2026-89887}\n   * CVE-2026-89951\n     - batman-adv: fix stale receive device on merged fragments {CVE-2026-89951}\n   * CVE-2026-89850\n     - scsi: qla2xxx: Don't query firmware state while chip is down\n       {CVE-2026-89850}\n   * CVE-2026-90034\n     - usb: image: mdc800: change kmalloc() to kzalloc() {CVE-2026-90034}\n   * CVE-2026-80786\n     - fbdev: Wrap user-invoked calls to fb_set_var() in helper {CVE-2026-80786}\n   * CVE-2023-54023\n     - btrfs: fix race between balance and cancel/pause {CVE-2023-54023}\n   * CVE-2025-68173\n     - ftrace: Fix softlockup in ftrace_module_enable {CVE-2025-68173}\n   * CVE-2026-80757\n     - selinux: reject a class permission count below its inherited common\n       {CVE-2026-80757}\n   * CVE-2026-74256\n     - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check\n       {CVE-2026-74256}\n   * CVE-2026-80830\n     - usb: core: Add lock to usb_wakeup_notification() {CVE-2026-80830}\n   * CVE-2026-80886\n     - serial: msm: Disable DMA for kernel console UART {CVE-2026-80886}\n   * CVE-2026-80824\n     - usb: usbfs: fix use-after-free of usb_device in usbdev_release()\n       {CVE-2026-80824}\n   * CVE-2026-80814\n     - rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814}\n   * CVE-2025-38584\n     - padata: Fix pd UAF once and for all {CVE-2025-38584}\n   * CVE-2025-38259\n     - ASoC: codecs: wcd9335: Fix missing free of regulator supplies\n       {CVE-2025-38259}\n   * CVE-2024-50067\n     - uprobe: avoid out-of-bounds memory access of fetching args\n       {CVE-2024-50067}\n   * CVE-2026-80854\n     - usb: gadget: f_tcm: keep port count until LUN teardown completes\n       {CVE-2026-80854}\n   * CVE-2026-89740\n     - serial: imx: serialize imx_uart_ports[] lifetime {CVE-2026-89740}\n   * CVE-2026-89666\n     - nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops\n       {CVE-2026-89666}\n   * CVE-2026-80847\n     - tcp: clamp route advmss to TCP_MIN_MSS {CVE-2026-80847}\n   * CVE-2026-80861\n     - usb: xhci: bail out of setup if the controller is inaccessible\n       {CVE-2026-80861}\n   * CVE-2026-89468\n     - power: supply: lp8788-charger: fix use-after-free on remove\n       {CVE-2026-89468}\n   * CVE-2026-80974\n     - mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974}\n   * CVE-2026-89528\n     - svcrdma: Reject Read lists that exceed the page budget {CVE-2026-89528}\n   * CVE-2026-89531\n     - svcrdma: Reject connection when transport allocation fails\n       {CVE-2026-89531}\n   * CVE-2026-89527\n     - svcrdma: Use svc_xprt_put to free listener on create failure\n       {CVE-2026-89527}\n   * CVE-2026-89492\n     - ocfs2: validate directory-index entry counts when reading metadata\n       {CVE-2026-89492}\n   * CVE-2026-89441\n     - mmc: via-sdmmc: cancel card-detect work on remove {CVE-2026-89441}\n   * CVE-2026-89719\n     - zram: fix out-of-bounds access in read_block_state() {CVE-2026-89719}\n   * CVE-2026-89718\n     - zram: fix out-of-bounds access in writeback_store() {CVE-2026-89718}\n   * CVE-2026-80996\n     - net: l2tp: do not propagate multicast notification errors {CVE-2026-80996}\n   * CVE-2026-80841\n     - net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}\n   * CVE-2026-80925\n     - vlan: fix skb_under_panic and races when toggling HW VLAN offload\n       {CVE-2026-80925}\n   * CVE-2026-89484\n     - lockd: fix NULL dereference on lockowner allocation failure\n       {CVE-2026-89484}\n   * CVE-2026-89462\n     - power: supply: max17040: propagate register read errors {CVE-2026-89462}\n   * CVE-2026-80901\n     - ipvs: fix the checksum validations {CVE-2026-80901}\n   * CVE-2026-74395\n     - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference\n       {CVE-2026-74395}\n   * CVE-2026-80884\n     - ntb: Store original DMA address for future release {CVE-2026-80884}\n   * CVE-2026-80789\n     - nvmet-tcp: bound SGL data length before allocating command buffers\n       {CVE-2026-80789}\n   * CVE-2026-80913\n     - selinux: require every boolean value to be defined {CVE-2026-80913}\n   * CVE-2026-80797\n     - nfc: pn533: purge fragmented skbs during cleanup {CVE-2026-80797}\n   * CVE-2026-80738\n     - bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie\n       {CVE-2026-80738}\n   * CVE-2026-80737\n     - serial: amba-pl011: synchronize DMA teardown {CVE-2026-80737}\n   * CVE-2026-80798\n     - nfc: llcp: reject PDUs shorter than the LLCP header {CVE-2026-80798}\n   * CVE-2026-80840\n     - ipv6: seg6: clear IPv4 control block on IPIP decapsulation\n       {CVE-2026-80840}\n   * CVE-2026-80764\n     - Bluetooth: hci_event: fix LE list UAF on reset {CVE-2026-80764}\n   * CVE-2026-80851\n     - gtp: serialize PDP context updates {CVE-2026-80851}\n   * CVE-2026-80828\n     - ALSA: usb-audio: Complete cleanup after system-resume errors\n       {CVE-2026-80828}\n   * CVE-2026-80807\n     - nilfs2: reject invalid block index in GC ioctl {CVE-2026-80807}\n   * CVE-2026-80852\n     - tls: device: fix out-of-bounds write in tls_append_frag() {CVE-2026-80852}\n   * CVE-2026-80733\n     - net: remove WARN_ON_ONCE() from sk_mc_loop() {CVE-2026-80733}\n   * CVE-2026-80782\n     - HID: magicmouse: do not keep a stale msc-\u003einput if no input is claimed\n       {CVE-2026-80782}\n   * CVE-2026-80843\n     - xfrm: fix xfrm_state_construct() auth-trunc leak {CVE-2026-80843}\n   * CVE-2023-53834\n     - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match\n       {CVE-2023-53834}\n   * CVE-2022-50774\n     - crypto: qat - fix DMA transfer direction {CVE-2022-50774}\n   * CVE-2023-53799\n     - crypto: api - Use work queue in crypto_destroy_instance {CVE-2023-53799}\n   * CVE-2024-50135\n     - nvme-pci: fix race condition between reset and nvme_dev_disable()\n       {CVE-2024-50135}\n   * CVE-2022-50766\n     - btrfs: set generation before calling btrfs_clean_tree_block in\n       btrfs_init_new_buffer {CVE-2022-50766}\n   * CVE-2025-40100\n     - btrfs: do not assert we found block group item when creating free space\n       tree {CVE-2025-40100}\n   * CVE-2025-40180\n     - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop\n       {CVE-2025-40180}\n   * CVE-2025-68344\n     - ALSA: wavefront: Fix integer overflow in sample size validation\n       {CVE-2025-68344}\n   * CVE-2024-50166\n     - fsl/fman: Fix refcount handling of fman-related devices {CVE-2024-50166}\n   * CVE-2025-71193\n     - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend\n       {CVE-2025-71193}\n   * CVE-2023-53815\n     - posix-timers: Prevent RT livelock in itimer_delete() {CVE-2023-53815}\n   * CVE-2026-80742\n     - af_packet: Don't send zero-byte data in tpacket_snd(). {CVE-2026-80742}\n   * CVE-2026-80875\n     - ipvs: use parsed transport offset in TCP state lookup {CVE-2026-80875}\n   * CVE-2026-80809\n     - ocfs2: fix missing metadata reservation for large xattrs {CVE-2026-80809}\n   * CVE-2026-74321\n     - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()\n       {CVE-2026-74321}\n   * CVE-2026-80731\n     - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header\n       {CVE-2026-80731}\n   * CVE-2026-72378\n     - afs: Fix error code in afs_extract_vl_addrs() {CVE-2026-72378}\n   * CVE-2026-80752\n     - Input: psxpad-spi - set driver data before use {CVE-2026-80752}\n   * CVE-2026-80801\n     - nfc: microread: validate target discovery payload lengths {CVE-2026-80801}\n   * CVE-2026-72165\n     - mtd: rawnand: fix condition in 'nand_select_target()' {CVE-2026-72165}\n   * CVE-2026-80877\n     - afs: Fix vllist leak {CVE-2026-80877}\n   * CVE-2026-80819\n     - Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept\n       {CVE-2026-80819}\n   * CVE-2026-63934\n     - iio: gyro: itg3200: fix i2c read into the wrong stack location\n       {CVE-2026-63934}\n   * CVE-2025-68777\n     - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation\n       {CVE-2025-68777}\n   * CVE-2026-63908\n     - Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem\n       {CVE-2026-63908}\n   * CVE-2025-40116\n     - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup\n       {CVE-2025-40116}\n   * CVE-2025-68339\n     - atm/fore200e: Fix possible data race in fore200e_open() {CVE-2025-68339}\n   * CVE-2026-63957\n     - USB: serial: safe_serial: fix memory corruption with small endpoint\n       {CVE-2026-63957}\n   * CVE-2023-53840\n     - usb: early: xhci-dbc: Fix a potential out-of-bound memory access\n       {CVE-2023-53840}\n   * CVE-2025-68328\n     - firmware: stratix10-svc: fix bug in saving controller data\n       {CVE-2025-68328}\n   * CVE-2026-63915\n     - nfc: hci: fix out-of-bounds read in HCP header parsing {CVE-2026-63915}\n   * CVE-2026-63893\n     - thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()\n       {CVE-2026-63893}\n   * CVE-2026-63927\n     - usb: dwc2: Fix use after free in debug code {CVE-2026-63927}\n   * CVE-2026-63954\n     - hpfs: fix a crash if hpfs_map_dnode_bitmap fails {CVE-2026-63954}\n   * CVE-2026-64010\n     - nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() {CVE-2026-64010}\n   * CVE-2026-63892\n     - thunderbolt: property: Reject dir_len \u003c 4 to prevent size_t underflow\n       {CVE-2026-63892}\n   * CVE-2026-64014\n     - Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size\n       {CVE-2026-64014}\n   * CVE-2025-68364\n     - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()\n       {CVE-2025-68364}\n   * CVE-2026-63991\n     - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()\n       {CVE-2026-63991}\n   * CVE-2026-63971\n     - sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}\n   * CVE-2025-71069\n     - f2fs: invalidate dentry cache on failed whiteout creation {CVE-2025-71069}\n   * CVE-2026-64011\n     - nfc: llcp: Fix use-after-free in llcp_sock_release() {CVE-2026-64011}\n   * CVE-2026-63888\n     - scsi: target: iscsi: Fix CRC overread and double-free in\n       iscsit_handle_text_cmd() {CVE-2026-63888}\n   * CVE-2026-89476\n     - sctp: fix stream-\u003eoutcnt underflow on duplicate RECONF responses\n       {CVE-2026-89476}\n   * CVE-2026-89574\n     - dm array: validate array block headers on read {CVE-2026-89574}\n   * CVE-2026-63962\n     - usb: typec: tcpm: bound altmode_desc[] per iteration in\n       svdm_consume_modes() {CVE-2026-63962}\n   * CVE-2026-63983\n     - net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}\n   * CVE-2026-80994\n     - net: openvswitch: fix flow mask use-after-free on flow deletion\n       {CVE-2026-80994}\n   * CVE-2026-80928\n     - smack: fix cred UAF in smack_file_send_sigiotask() {CVE-2026-80928}\n   * CVE-2026-89448\n     - iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}\n   * CVE-2026-89633\n     - smb: client: fix OOB read/write from unvalidated DataOffset in\n       coalesce_t2() {CVE-2026-89633}\n   * CVE-2026-80976\n     - seg6: reset IP6CB after IPv6 decapsulation {CVE-2026-80976}\n   * CVE-2026-63922\n     - ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}\n   * CVE-2026-80982\n     - net/smc: fix use-after-free in smc_rx_pipe_buf_release() {CVE-2026-80982}\n   * CVE-2026-89487\n     - openvswitch: only skb_tx_error() a packet we are about to drop\n       {CVE-2026-89487}\n   * CVE-2026-89478\n     - sctp: drop a chunk if its transport was removed {CVE-2026-89478}\n   * CVE-2026-81001\n     - slip: fix use-after-free in sl_sync() {CVE-2026-81001}\n   * CVE-2026-89537\n     - SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2\n       {CVE-2026-89537}\n   * CVE-2026-80971\n     - ALSA: bcd2000: clear the URB pointers on disconnect {CVE-2026-80971}\n   * CVE-2026-63930\n     - iio: buffer: hw-consumer: fix use-after-free in error path\n       {CVE-2026-63930}\n   * CVE-2026-72389\n     - bridge: stp: Fix a potential use-after-free when deleting a bridge\n       {CVE-2026-72389}\n   * CVE-2025-40351\n     - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()\n       {CVE-2025-40351}\n   * CVE-2026-64009\n     - xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}\n   * CVE-2026-81000\n     - net: tun: bound receive headroom {CVE-2026-81000}\n   * CVE-2026-80676\n     - Drivers: hv: vmbus: use generic driver_override infrastructure\n       {CVE-2026-80676}\n   * CVE-2026-74510\n     - Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}\n   * CVE-2026-72472\n     - nfs: use nfsi-\u003erwsem to protect traversal of the file lock list\n       {CVE-2026-72472}\n   * CVE-2026-68367\n     - usb: gadget: f_tcm: synchronize delayed set_alt with teardown\n       {CVE-2026-68367}\n   * CVE-2026-74450\n     - drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}\n   * CVE-2026-74637\n     - perf/core: Fix group leader use-after-free after sibling detach\n       {CVE-2026-74637}\n   * CVE-2026-68404\n     - wifi: cfg80211: use wiphy work for socket owner autodisconnect\n       {CVE-2026-68404}\n   * CVE-2026-89480\n     - nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480}\n   * CVE-2026-72084\n     - scsi: target: Bound PR-OUT TransportID parsing to the received buffer\n       {CVE-2026-72084}\n   * CVE-2026-74720\n     - bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}\n   * CVE-2026-74631\n     - net: smc: fix splice entry lifetime imbalance in smc_rx_splice\n       {CVE-2026-74631}\n   * CVE-2026-89762\n     - apparmor: fix cred UAF caused by begin_current_label_crit_section()\n       {CVE-2026-89762}\n   * CVE-2026-89659\n     - NFSD: Prevent client use-after-free during delegation revoke\n       {CVE-2026-89659}\n   * CVE-2026-89488\n     - openvswitch: Fix CT limit teardown use-after-free {CVE-2026-89488}\n   * CVE-2026-72390\n     - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF\n       {CVE-2026-72390}\n   * CVE-2026-72255\n     - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst\n       {CVE-2026-72255}\n   * CVE-2026-74387\n     - ALSA: seq: midi: Serialize output teardown with event_input\n       {CVE-2026-74387}\n   * CVE-2026-74565\n     - netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}\n   * CVE-2026-74575\n     - thunderbolt: Prevent XDomain delayed work use-after-free on disconnect\n       {CVE-2026-74575}\n   * CVE-2026-80536\n     - xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}\n   * CVE-2026-89637\n     - smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed\n       secondary T2 {CVE-2026-89637}\n   * CVE-2026-68398\n     - ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF\n       {CVE-2026-68398}\n   * CVE-2026-68426\n     - xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment\n       {CVE-2026-68426}\n   * CVE-2026-89708\n     - nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown\n       {CVE-2026-89708}\n   * CVE-2026-74752\n     - sctp: validate cookie AUTH state before use {CVE-2026-74752}\n   * CVE-2026-64557\n     - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()\n       {CVE-2026-64557}\n   * CVE-2026-72336\n     - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control\n       {CVE-2026-72336}\n   * CVE-2026-64550\n     - net: qualcomm: rmnet: validate MAP frame length before ingress parsing\n       {CVE-2026-64550}\n   * CVE-2026-74345\n     - RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}\n   * CVE-2026-72404\n     - tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()\n       {CVE-2026-72404}\n   * CVE-2026-64543\n     - tipc: fix use-after-free of the discoverer in tipc_disc_rcv()\n       {CVE-2026-64543}\n   * CVE-2026-72157\n     - net: thunderbolt: Fix frags[] overflow by bounding frame_count\n       {CVE-2026-72157}\n   * CVE-2026-74589\n     - bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}\n   * CVE-2026-74651\n     - staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() {CVE-2026-74651}\n   * CVE-2026-68190\n     - staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() {CVE-2026-68190}\n   * CVE-2026-74649\n     - staging: rtl8723bs: fix missing shared-key auth challenge length check\n       {CVE-2026-74649}\n   * CVE-2026-74582\n     - packet: use consistent hard_header_len in non-ring send paths\n       {CVE-2026-74582}\n   * CVE-2026-74669\n     - ipvs: clear IPv4 options after rebasing tunnel ICMP errors\n       {CVE-2026-74669}\n   * CVE-2026-89553\n     - nouveau/gem: reserve the bo in the info ioctl around the vma lookup\n       {CVE-2026-89553}\n   * CVE-2026-74550\n     - net: do not send ICMP/NDISC Redirects when peer allocation fails\n       {CVE-2026-74550}\n   * CVE-2026-74569\n     - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in\n       sip_help_tcp() {CVE-2026-74569}\n   * CVE-2026-68108\n     - drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}\n   * CVE-2026-72129\n     - nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}\n   * CVE-2026-74700\n     - net/sched: cls_api: Always acquire rtnl_lock when destroying locked\n       classifiers {CVE-2026-74700}\n   * CVE-2026-63826\n     - fbdev: fix use-after-free in store_modes() {CVE-2026-63826}\n   * CVE-2026-68138\n     - net/sched: serialize qdisc_rtab_list against concurrent get/put\n       {CVE-2026-68138}\n   * CVE-2026-89549\n     - sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}\n   * CVE-2026-74377\n     - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path\n       {CVE-2026-74377}\n   * CVE-2026-64470\n     - Bluetooth: btusb: fix use-after-free on marvell probe failure\n       {CVE-2026-64470}\n   * CVE-2026-89550\n     - SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}\n   * CVE-2026-89655\n     - ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock\n       {CVE-2026-89655}\n   * CVE-2026-64541\n     - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket\n       {CVE-2026-64541}\n   * CVE-2026-72322\n     - ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}\n   * CVE-2026-68236\n     - drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}\n   * CVE-2026-89699\n     - nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}\n   * CVE-2026-89481\n     - nvme-tcp: fix host memory disclosure on R2T for a read command\n       {CVE-2026-89481}\n   * CVE-2026-68093\n     - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after\n       hotplug {CVE-2026-68093}\n   * CVE-2026-74704\n     - net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter\n       {CVE-2026-74704}\n   * CVE-2026-74289\n     - ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().\n       {CVE-2026-74289}\n   * CVE-2026-74436\n     - rxrpc: serialize kernel accept preallocation with socket teardown\n       {CVE-2026-74436}\n   * CVE-2026-64583\n     - usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown\n       {CVE-2026-64583}\n   * CVE-2026-74283\n     - tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}\n   * CVE-2026-74479\n     - net: pktgen: fix proc entry use-after-free {CVE-2026-74479}\n   * CVE-2026-74341\n     - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response\n       {CVE-2026-74341}\n   * CVE-2026-74628\n     - net/x25: fix use-after-free of the socket by its timers {CVE-2026-74628}\n   * CVE-2026-64468\n     - binder: fix UAF in binder_free_transaction() {CVE-2026-64468}\n   * CVE-2026-74746\n     - netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}\n   * CVE-2026-89656\n     - libceph: reject buckets with mismatched CRUSH ids {CVE-2026-89656}\n   * CVE-2026-89475\n     - power: supply: bq24257: fix use-after-free on remove {CVE-2026-89475}\n     - devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc\n       {CVE-2026-89475}\n     - devm-helpers: Add resource managed version of work init {CVE-2026-89475}\n     - workqueue: Add resource managed version of delayed work init\n       {CVE-2026-89475}\n   * CVE-2026-68142\n     - geneve: require CAP_NET_ADMIN in the device netns for changelink\n       {CVE-2026-68142}\n   * CVE-2026-74688\n     - sctp: clear control chunk transport if it is being removed\n       {CVE-2026-74688}\n   * CVE-2026-68399\n     - bpf: Fix UAF in sock clone early bailouts {CVE-2026-68399}\n   * CVE-2026-72085\n     - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it\n       {CVE-2026-72085}\n   * CVE-2026-72413\n     - sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n   * CVE-2026-74689\n     - net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}\n   * CVE-2026-72323\n     - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}\n   * CVE-2026-74359\n     - configfs_lookup(): don't leave -\u003es_dentry dangling on failure\n       {CVE-2026-74359}\n   * CVE-2026-74454\n     - drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size\n       {CVE-2026-74454}\n   * CVE-2026-74496\n     - fou: Fix use-after-free in fou_create() {CVE-2026-74496}\n   * CVE-2026-80681\n     - vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}\n   * CVE-2026-68414\n     - wifi: cfg80211: cancel sched scan results work on unregister\n       {CVE-2026-68414}\n   * CVE-2026-64582\n     - RDMA/rxe: Fix a use-after-free problem in rxe_mmap {CVE-2026-64582}\n   * CVE-2026-72288\n     - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI\n       disabling {CVE-2026-72288}\n   * CVE-2026-68202\n     - ALSA: seq: close a re-opened queue timer in the destructor\n       {CVE-2026-68202}\n   * CVE-2026-64546\n     - drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}\n   * CVE-2026-89559\n     - libnvdimm/labels: Prevent integer overflow in __nd_label_validate()\n       {CVE-2026-89559}\n   * CVE-2026-89469\n     - power: supply: lp8727: fix use-after-free in lp8727_release_irq()\n       {CVE-2026-89469}\n   * CVE-2026-89575\n     - dm raid1: reserve space for NUL-terminator in build_constructor_string()\n       {CVE-2026-89575}\n   * CVE-2026-89555\n     - mpls: reload header after pskb_may_pull() {CVE-2026-89555}\n   * CVE-2026-89504\n     - regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving\n       dangling of_node pointer {CVE-2026-89504}\n   * CVE-2026-89569\n     - Bluetooth: RFCOMM: serialize security confirmation handling\n       {CVE-2026-89569}\n   * CVE-2026-89761\n     - apparmor: fix out-of-bounds write when null terminating a label vec\n       {CVE-2026-89761}\n   * CVE-2026-89494\n     - ocfs2: validate lengths in dlm_mig_lockres_handler {CVE-2026-89494}\n   * CVE-2026-89548\n     - SUNRPC: always drain cache_cleaner before destroying a cache_detail\n       {CVE-2026-89548}\n   * CVE-2026-89477\n     - sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}\n   * CVE-2026-89495\n     - ocfs2: bound namelen in dlm_migrate_request_handler {CVE-2026-89495}\n   * CVE-2026-74744\n     - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev\n       {CVE-2026-74744}\n   * CVE-2026-74282\n     - tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}\n   * CVE-2026-68198\n     - wifi: ath6kl: fix use-after-free in aggr_reset_state() {CVE-2026-68198}\n   * CVE-2026-74386\n     - nvmet-tcp: fix page fragment cache leak in error path {CVE-2026-74386}\n   * CVE-2026-68155\n     - libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}\n   * CVE-2026-72383\n     - sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}\n   * CVE-2026-72476\n     - dmaengine: Fix possible use after free {CVE-2026-72476}\n   * CVE-2026-74597\n     - ip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err() {CVE-2026-74597}\n   * CVE-2026-74587\n     - sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}\n   * CVE-2026-72491\n     - net/9p: fix race condition on rdma-\u003estate in trans_rdma.c {CVE-2026-72491}\n   * CVE-2026-80619\n     - apparmor: fix potential UAF in aa_replace_profiles {CVE-2026-80619}\n   * CVE-2026-64548\n     - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()\n       {CVE-2026-64548}\n   * CVE-2026-74499\n     - ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()\n       {CVE-2026-74499}\n   * CVE-2026-68365\n     - USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}\n   * CVE-2026-68320\n     - sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid\n       {CVE-2026-68320}\n   * CVE-2026-74498\n     - ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set\n       {CVE-2026-74498}\n   * CVE-2026-74682\n     - ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}\n   * CVE-2026-72226\n     - batman-adv: tt: prevent TVLV OOB check overflow {CVE-2026-72226}\n   * CVE-2026-74469\n     - sctp: prevent peer transport count overflow {CVE-2026-74469}\n   * CVE-2026-74287\n     - sctp: validate embedded address parameter length {CVE-2026-74287}\n   * CVE-2026-63887\n     - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf\n       {CVE-2026-63887}\n   * CVE-2026-90413\n     - IB/isert: reject login PDUs declaring more data than was received\n       {CVE-2026-90413}\n   * Miscellaneous upstream changes\n     - net: rose: fix a typo in rose_clear_routes()\n     - lockdep: fix build of the preemption assertion macros on 5.4\n   * Bump ABI 5.4.0-239","status":"published","published":"2026-10-19T13:48:34Z","modified":"2026-10-26T09:43:46.423323835Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791780738","title":"kernel: Fix of 72 CVEs","description":"- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}\n- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}\n- ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}\n- ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}\n- net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}\n- netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}\n- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}\n- ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}\n- ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}\n- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}\n- thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}\n- inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}\n- libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}\n- SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}\n- SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}\n- openvswitch: only skb_tx_error() a packet we are about to drop {CVE-2026-89487}\n- nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}\n- sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}\n- net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}\n- ALSA: bcd2000: clear the URB pointers on disconnect {CVE-2026-80971}\n- netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}\n- Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}\n- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751}\n- RDMA/core: Fix \"KASAN: slab-use-after-free Read in ib_register_device\" problem {CVE-2025-38022}\n- drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}\n- scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}\n- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}\n- xfrm: ah6: validate routing header segments_left {CVE-2026-80844}\n- drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}\n- RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}\n- nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}\n- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}\n- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}\n- crypto: algif_aead - fix uninitialized ctx-\u003einit {CVE-2025-39964}\n- netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}\n- tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}\n- sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}\n- bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}\n- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}\n- rhashtable: clear stale iter-\u003ep on table restart {CVE-2026-64563}\n- mpls: reload header after pskb_may_pull() {CVE-2026-89555}\n- net: tun: bound receive headroom {CVE-2026-81000}\n- netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}\n- firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}\n- firewire: net: remove unused variable 'guid' {CVE-2023-53432}\n- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760}\n- gfs2: fix kernel BUG in gfs2_quota_cleanup {CVE-2023-52760}\n- gfs2: Fix asynchronous thread destruction {CVE-2023-52760}\n- gfs2: Stop using gfs2_make_fs_ro for withdraw {CVE-2023-52760}\n- crypto: scomp - fix req-\u003edst buffer overflow {CVE-2023-52612}\n- crypto: scompress - initialize per-CPU variables on each CPU {CVE-2023-52612}\n- crypto: scompress - Use per-CPU struct instead multiple variables {CVE-2023-52612}\n- crypto: scompress - return proper error code for allocation failure {CVE-2023-52612}\n- bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data {CVE-2022-50536}\n- virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687}\n- virtio_net: avoid using netif_tx_disable() for serializing tx routine {CVE-2022-49687}\n- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991}\n- mm/khugepaged: unify collapse pmd clear, flush and free {CVE-2022-48991}\n- KVM: SVM: Flush pages under kvm-\u003elock to fix UAF in svm_register_enc_region() {CVE-2024-35791}\n- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}\n- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}\n- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}\n- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}\n- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}\n- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}\n- sctp: validate cookie AUTH state before use {CVE-2026-74752}\n- packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582}\n- net: tunnels: annotate lockless accesses to dev-\u003eneeded_headroom {CVE-2023-53109}\n- net/sched: act_ct: fix sk_buff leak when the header checks reject a packet {CVE-2026-74621}\n- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}\n- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}\n- drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}\n- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}\n- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}\n- NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}\n- NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}\n- enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}\n- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}","status":"published","published":"2026-10-12T05:41:34Z","modified":"2026-10-26T09:43:52.607784478Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792749577","title":"kernel: Fix of 97 CVEs","description":"- net: skbuff: propagate shared-frag marker in skb_zerocopy()\n- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}\n- net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}\n- net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}\n- ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}\n- net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}\n- sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}\n- tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}\n- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}\n- usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}\n- ice: fix double-free of tx_buf skb {CVE-2026-53009}\n- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}\n- configfs_lookup(): don't leave -\u003es_dentry dangling on failure {CVE-2026-74359}\n- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}\n- bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}\n- crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}\n- smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}\n- HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}\n- HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}\n- hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}\n- KEYS: encrypted: fix integer overflow of datablob_len {CVE-2026-98222}\n- scsi: qla2xxx: Skip vport under deletion in report ID acquisition {CVE-2026-97531}\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() {CVE-2026-98343}\n- tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}\n- libceph: Fix potential null-ptr-deref in decode_choose_args() {CVE-2026-52957}\n- libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}\n- sctp: prevent peer transport count overflow {CVE-2026-74469}\n- sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}\n- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n- nvme: add missing SRCU grace period in error path {CVE-2026-89972}\n- nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}\n- drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}\n- usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}\n- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}\n- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}\n- wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}\n- slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}\n- vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}\n- net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}\n- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}\n- wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}\n- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls {CVE-2026-53075}\n- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}\n- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}\n- scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}\n- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}\n- pNFS: Fix use-after-free in pnfs_update_layout() {CVE-2026-63800}\n- NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}\n- fs/mbcache: cancel shrink work before destroying the cache {CVE-2026-53129}\n- ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}\n- ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}\n- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}\n- ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}\n- smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}\n- cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2023-53794}\n- nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}\n- media: em28xx: defer audio-only extension registration {CVE-2026-89892}\n- media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}\n- nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}\n- libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}\n- dmaengine: wait for RCU readers before releasing dma_device {CVE-2026-98342}\n- dmaengine: Fix possible use after free {CVE-2026-72476}\n- hwrng: core - fix rng list on registration error {CVE-2026-93163}\n- char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}\n- dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}\n- thunderbolt: Bound root directory content to block size {CVE-2026-53149}\n- thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}\n- SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}\n- Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp {CVE-2026-74540}\n- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}\n- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}\n- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER {CVE-2026-53072}\n- iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}\n- iommu/amd: Fix clone_alias() to use the original device's devid {CVE-2026-53053}\n- HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}\n- IB/mlx4: Fix use-after-free on pkey sysfs registration failure {CVE-2026-98217}\n- RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}\n- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}\n- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}\n- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}\n- ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}\n- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}\n- ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}\n- KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}\n- perf: Fix addr_filter_ranges lifetime {CVE-2026-93817}\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}\n- crypto: ccp - copy IV using skcipher ivsize {CVE-2026-53016}\n- net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}\n- tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() {CVE-2026-63994}\n- ipv4: free net-\u003eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}\n- netfilter: flowtable: hold reference on ct until flow is released {CVE-2026-98320}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}\n- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}","status":"published","published":"2026-10-23T10:01:18Z","modified":"2026-10-26T09:43:43.216703371Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792979985","title":"kernel: Fix of 154 CVEs","description":"- net: bridge: fix vlan tunnel dst refcnt when egressing {CVE-2021-47222}\n- net: bridge: fix vlan tunnel dst null pointer dereference {CVE-2021-47223}\n- writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() {CVE-2026-64378}\n- writeback, cgroup: increment isw_nr_in_flight before grabbing an inode {CVE-2026-64378}\n- writeback, cgroup: add smp_mb() to cgroup_writeback_umount() {CVE-2026-64378}\n- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount {CVE-2026-64378}\n- libceph: validate banner payload length {CVE-2026-90067}\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors {CVE-2026-98606}\n- procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}\n- NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}\n- smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}\n- smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}\n- smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}\n- smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}\n- RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}\n- RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs {CVE-2026-74390}\n- nfsd: fix clock domain mismatch in clients_still_reclaiming() {CVE-2026-89685}\n- vdpa_sim_blk: reject out-of-range sector starts {CVE-2026-97991}\n- Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}\n- HID: wacom: Fix OOB write in wacom_hid_set_device_mode() {CVE-2026-63916}\n- nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone {CVE-2026-89482}\n- nvmet-tcp: fix page fragment cache leak in error path {CVE-2026-74386}\n- bpf: mark a NULL call argument precise {CVE-2026-98019}\n- bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}\n- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get {CVE-2026-72262}\n- ASoC: SOF: ipc3-topology: Move and correct size checks in sof_ipc3_control_load_bytes() {CVE-2026-72262}\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan {CVE-2026-98108}\n- mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}\n- netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}\n- netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}\n- reboot: fix cad_pid use-after-free race {CVE-2026-97938}\n- fs/resctrl: Fix UAF from worker threads when domains are removed {CVE-2026-93099}\n- ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}\n- ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}\n- openvswitch: Fix CT limit teardown use-after-free {CVE-2026-89488}\n- sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}\n- netfilter: conntrack: remove sprintf usage {CVE-2026-53002}\n- fuse: re-lock request before replacing page cache folio {CVE-2026-53388}\n- fanotify: fix false positive on permission events {CVE-2026-46150}\n- configfs_lookup(): don't leave -\u003es_dentry dangling on failure {CVE-2026-74359}\n- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}\n- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n- sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}\n- sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}\n- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}\n- sctp: diag: reject stale associations in dump_one path {CVE-2026-52917}\n- sctp: Hold sock lock while iterating over address list {CVE-2026-52917}\n- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}\n- nfsd: gate nfs3 setacl by argp-\u003emask {CVE-2026-89671}\n- nfsd: fix posix_acl leak on SETACL decode failure {CVE-2026-53397}\n- nfsd: release layout stid on setlease failure {CVE-2026-53399}\n- PCI: use generic driver_override infrastructure {CVE-2026-53120}\n- Bluetooth: MGMT: validate advertising TLV before type checks {CVE-2026-53255}\n- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid {CVE-2026-53255}\n- drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}\n- bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}\n- tracing: Take trace_array reference when opening options file {CVE-2026-90013}\n- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998}\n- bpf, sockmap: Reject max_entries \u003e INT_MAX in sock_map_alloc {CVE-2026-98588}\n- thunderbolt: Reject oversized XDomain properties responses {CVE-2026-98687}\n- Bluetooth: RFCOMM: Fix initial port reference race {CVE-2026-98739}\n- cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2023-53794}\n- smb: client: Fix next buffer leak in receive_encrypted_standard() {CVE-2026-64381}\n- net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}\n- ceph: only d_add() negative dentries when they are unhashed {CVE-2026-46052}\n- net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}\n- gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- fbcon: Avoid OOB font access if console rotation fails {CVE-2026-46191}\n- ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}\n- misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}\n- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}\n- media: em28xx: defer audio-only extension registration {CVE-2026-89892}\n- nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}\n- libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}\n- dmaengine: wait for RCU readers before releasing dma_device {CVE-2026-98342}\n- hwrng: core - fix rng list on registration error {CVE-2026-93163}\n- char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}\n- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}\n- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}\n- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}\n- ALSA: 6fire: fix OOB write from device-reported iso length {CVE-2026-98312}\n- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}\n- ALSA: bcd2000: Fix race between rawmidi and disconnect {CVE-2026-98316}\n- ALSA: bcd2000: clear the URB pointers on disconnect {CVE-2026-80971}\n- ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}\n- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}\n- net/sched: act_tunnel_key: Defer dst_release to RCU callback {CVE-2026-68377}\n- libceph: replace BUG_ON with bounds check for map-\u003emax_osd {CVE-2025-68283}\n- net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}\n- tipc: fix use-after-free of the discoverer in tipc_disc_rcv() {CVE-2026-64543}\n- tipc: require net admin for TIPCv2 netlink mutators {CVE-2026-74283}\n- xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}\n- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}\n- net: lock the socket in sock_gettstamp() {CVE-2026-98276}\n- net: pktgen: fix proc entry use-after-free {CVE-2026-74479}\n- netpoll: fix a use-after-free on shutdown path {CVE-2026-64424}\n- thunderbolt: property: Reject dir_len \u003c 4 to prevent size_t underflow {CVE-2026-63892}\n- thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}\n- net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove {CVE-2026-52947}\n- net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}\n- sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}\n- svcrdma: Reject inline replies that overflow the pull-up buffer {CVE-2026-89530}\n- svcrdma: Reject Write/Reply chunks with segcount 0 {CVE-2026-93228}\n- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}\n- bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}\n- net: add more sanity checks to qdisc_pkt_len_init() {CVE-2024-49948}\n- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}\n- mlxsw: pci: Don't store pci_device_id {CVE-2026-90421}\n- ata: ata_generic: Don't store pci_device_id {CVE-2026-90421}\n- wifi: mwifiex: validate scan response extents {CVE-2026-98185}\n- nvme: add missing SRCU grace period in error path {CVE-2026-89972}\n- nvme-tcp: fix host memory disclosure on R2T for a read command {CVE-2026-89481}\n- nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480}\n- nvmet-tcp: fix race between ICReq handling and queue teardown {CVE-2026-46135}\n- usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}\n- wifi: ath9k_htc: don't store usb_device_id {CVE-2026-97541}\n- netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}\n- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}\n- inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}\n- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}\n- net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}\n- ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}\n- tcp: clear sock_ops cb flags before force-closing a child socket {CVE-2026-74268}\n- ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289}\n- tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() {CVE-2026-63992}\n- ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 {CVE-2026-64114}\n- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}\n- iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}\n- iommu/amd: Fix clone_alias() to use the original device's devid {CVE-2026-53053}\n- Input: alps - fix use-after-free bugs caused by dev3_register_work {CVE-2025-68822}\n- ACPI: platform: Use acpi_bus_get_primary_device() {CVE-2026-100072}\n- ACPI: bus: Introduce acpi_bus_get_primary_device() {CVE-2026-93251}\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}\n- scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}\n- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf {CVE-2026-63887}\n- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() {CVE-2026-63888}\n- usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}\n- usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}\n- ubi: Fix use-after-free when volume resizing failed {CVE-2023-53800}\n- drm/amdgpu: zero-initialize GART table on allocation {CVE-2026-53374}\n- Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}\n- net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}\n- net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}\n- net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}\n- HID: appleir: fix UAF on pending key_up_timer in remove() {CVE-2026-64363}\n- libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}\n- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}\n- skbuff: introduce skb_pull_data {CVE-2026-53254}\n- HID: rmi: fix OOB access with undersized RMI reports {CVE-2026-90000}\n- wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}\n- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}\n- mm/huge_memory: update file PMD counter before folio_put() {CVE-2026-53189}\n- IB/isert: wait for deferred control PDU completions before releasing the connection {CVE-2026-98357}\n- RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept {CVE-2026-98367}\n- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}\n- bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}\n- security/keys: fix missed RCU read section on lookup {CVE-2026-64015}\n- sched/psi: Create the psimon kthread outside of cgroup_mutex {CVE-2026-52991}\n- sched/psi: fix race between file release and pressure write {CVE-2026-52991}\n- cgroup/psi: Set of-\u003epriv to NULL upon file release {CVE-2026-52991}\n- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() {CVE-2022-50880}\n- bpf: Guard stack limits against 32bit overflow {CVE-2023-52676}","status":"published","published":"2026-10-26T02:02:41Z","modified":"2026-10-26T09:43:37.002229013Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"openSUSE-SU-2026:11880-1","title":"kernel-devel-7.2.7-1.1 on GA media","description":"These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-24T00:00:00Z","modified":"2026-09-25T18:23:09.586776147Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22091-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T15:44:43Z","modified":"2026-10-19T17:23:14.488875612Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24179-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T13:24:33Z","modified":"2026-10-20T17:23:58.081470941Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24181-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc (\"Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\").\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T15:51:36Z","modified":"2026-10-20T17:23:58.081294417Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24182-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T14:42:54Z","modified":"2026-10-20T17:23:58.082704471Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24184-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T13:51:59Z","modified":"2026-10-20T17:24:00.253930144Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24197-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T14:15:17Z","modified":"2026-10-21T17:23:09.534105524Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24235-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340).\n- CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330).\n- CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672).\n- CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388).\n- CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).\n- CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347).\n- CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802).\n- CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512).\n- CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275).\n- CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784).\n- CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538).\n- CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297).\n- CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818).\n- CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347).\n- CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913).\n- CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333).\n- CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335).\n- CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336).\n- CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901).\n- CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754).\n- CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766).\n- CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup (bsc#1280576).\n- CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171).\n- CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166).\n- CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464).\n- CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228).\n- CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93814: spi: core: Abort active target transfer on controller suspend.\n- CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data().\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479).\n- CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475).\n- CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450).\n- CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149).\n- CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205).\n- CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203).\n- CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945).\n- CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794).\n- CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880).\n- CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795).\n- CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173).\n- CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130).\n- CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739).\n- CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: core: Fix potential UAF after asynchronous card release (stable-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes).\n- ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes).\n- ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes).\n- ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git-fixes).\n- ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes).\n- arm64: hibernate: clone only the linear map that exists at runtime (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: codecs: aw88261: only check PLL and clock state at power-up (git-fixes).\n- ASoC: codecs: aw88261: reduce log spam (stable-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes).\n- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes).\n- ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: tas2781: Update default register address to TAS2563 (stable-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btmtk: add MT7902 MCU support (stable-fixes).\n- Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes).\n- Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes).\n- Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes).\n- Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes).\n- Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git-fixes).\n- Bluetooth: hci_core: Print number of packets in conn-\u003edata_q (stable-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes).\n- Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517).\n- bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517).\n- bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740).\n- btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116).\n- btrfs: tree-checker: validate INODE_REF's namelen (git-fixes).\n- config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default\n  configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892).\n- dmaengine: Add devm_dma_request_chan() (stable-fixes).\n- dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Export get_dev_from_fwnode() (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/msm: Recover HW before retire hung submit (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: tps65219: Fix GPIO input value reads (git-fixes).\n- gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: alps: unregister DualPoint Stick input device on remove (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: asus: fortify keyboard handshake (stable-fixes).\n- HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes).\n- HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes).\n- HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes).\n- HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes).\n- HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes).\n- hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes).\n- hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes).\n- hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i2c: mxs: fix DMA channel leak on probe error (git-fixes).\n- i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes).\n- i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes).\n- i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes).\n- i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes).\n- i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes).\n- i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: pac1934: check ACPI label duplication (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: rtq6056: add i2c_device_id support (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: admv1013: initialize callback mutex before registering notifier (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: health: max30102: fix NULL dereference in interrupt handler (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: aw96103: validate firmware data length (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- keys: translate request_key_auth pid for the reading procfs instance (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git-fixes).\n- KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes).\n- KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git-fixes).\n- KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes).\n- KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes).\n- KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter (git-fixes).\n- KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes).\n- KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git-fixes).\n- KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git-fixes).\n- KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: chips-media: wave5: Add range checks for dec_output_info (stable-fixes).\n- media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: i2c: imx355: Replace client-\u003edev usage (stable-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: imx355: Avoid calling imx355_power_off twice in error path (git-fixes).\n- media: qcom: camss: avoid format string warning (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes).\n- mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes).\n- mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes).\n- mtd: core: avoid double-free of OTP NVMEM device (git-fixes).\n- mtd: core: call _get_device() with the master MTD (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: pl353: Add message about ECC mode (stable-fixes).\n- mtd: rawnand: pl353: Fix debug prints (git-fixes).\n- mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: of_property: Omit bus properties without a subordinate bus (git-fixes).\n- PCI: plda: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- pinctrl: sunxi: keep a shadow copy of the data register output latches (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- platform/x86: ISST: Check for admin capability for write commands (stable-fixes).\n- platform/x86: ISST: Validate max level for set feature (git-fixes).\n- platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable-fixes).\n- platform/x86: sel3350-platform: Retain LED state on load and unload (stable-fixes).\n- platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: ab8500_fg: fix use-after-free on remove (git-fixes).\n- power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- procfs: fix possible double mmput() in do_procmap_query() (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- regulator: core: clamp voltage constraints before applying apply_uV (stable-fixes).\n- regulator: da9121: Use subvariant ids in the I2C table (stable-fixes).\n- ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334).\n- rtc: ac100: Assign .num before accessing .hws (git-fixes).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes).\n- rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes).\n- rtc: mv: add suspend/resume support for wakeup (stable-fixes).\n- rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes).\n- selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: fix TIOCMIWAIT race (git-fixes).\n- serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git-fixes).\n- serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes).\n- serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (git-fixes).\n- spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tpm: Disable TPM on null key name mismatch (git-fixes).\n- tty: serial: max3100: shut down timer before freeing port (git-fixes).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: cdns3: rename hibernated argument of role-\u003eresume() to lost_power (stable-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: ffs: fix mm lifetime handling (stable-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix ioctl hangup race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: Improve Soft Retries after short transfers (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes).\n- vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes).\n- watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable-fixes).\n- watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: add init_wiphy callback (stable-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable-fixes).\n- wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: prevent authentication frame length truncation (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes).\n- wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T13:51:59Z","modified":"2026-10-21T17:23:12.046754854Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24315-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc (\"Disable CONFIG_BATMAN_ADV (jsc#PED-16892)\").\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T16:13:17Z","modified":"2026-10-27T17:23:13.4159637Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24316-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).\n- CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955).\n- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a \"STACKTRACE\" histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the \"newfangled\" __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read \"ngpios\" as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix \"(null)\" output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random \"error beacon valid\" messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-12T16:39:36Z","modified":"2026-10-27T17:23:13.475564625Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4640-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804).\n- CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801).\n- CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a 'STACKTRACE' histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes).\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ('Disable CONFIG_BATMAN_ADV (jsc#PED-16892)').\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes).\n- ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: bound firmware ID by TLV length (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git-fixes).\n- Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix race condition during device registration (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes).\n- EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968).\n- EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read 'ngpios' as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix '(null)' output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: core: fix adapter registration race (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: s390: pci: Fix aisb calculation (bsc#1277451).\n- KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451).\n- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451).\n- KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451).\n- KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451).\n- KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451).\n- KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451).\n- KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451).\n- KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451).\n- KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git-fixes).\n- media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852).\n- net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852).\n- net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852).\n- net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- nvme-tcp: fix usage of page_frag_cache (bsc#1267882).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (git-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- USB: make to_usb_driver() use container_of_const() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random 'error beacon valid' messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mce: Add support for physical address valid bit (jsc#PED-16968).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951).\n- x86/tsx: Make tsx_ctrl_state static (bsc#1250951).\n- xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709).\n- xhci: fix lost bounce buffers on TDs spanning several ring segments (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-13T11:52:05Z","modified":"2026-10-14T11:15:08.088253504Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4687-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633).\n- CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).\n- CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138).\n- CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990).\n- CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234).\n- CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081).\n- CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953).\n- CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642).\n- CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499).\n- CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517).\n- CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522).\n- CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472).\n- CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769).\n- CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480).\n- CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420).\n- CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011).\n- CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868).\n- CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603).\n- CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061).\n- CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982).\n- CVE-2026-64496: iio: event: Fix event FIFO reset race (bsc#1273600).\n- CVE-2026-64540: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (bsc#1273302).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-68108: drm/amdgpu/vce: fix integer overflow in image size (bsc#1274869).\n- CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920).\n- CVE-2026-68184: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (bsc#1274981).\n- CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629).\n- CVE-2026-68350: wifi: carl9170: fix OOB read from off-by-two in TX status handler (bsc#1274682).\n- CVE-2026-68365: USB: serial: io_edgeport: cap received transmit credits (bsc#1276257).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831).\n- CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-68479: Bluetooth: btrtl: validate firmware patch bounds (bsc#1276585).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72166: net/9p: avoid -ERESTARTSYS leak to userspace (bsc#1277556).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (bsc#1277245).\n- CVE-2026-72444: flow_dissector: fix false-positive __read_overflow2_field() warning (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74276: spi: xilinx: use FIFO occupancy register to determine buffer size (bsc#1276495).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74386: nvmet-tcp: fix a memory leak when releasing a queue (bsc#1277098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74424: fbcon: fix NULL pointer dereference for a console without vc_data (bsc#1276321).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74497: ALSA: usb-audio: Clamp frame size in implicit-feedback mode (bsc#1275957).\n- CVE-2026-74498: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (bsc#1275958).\n- CVE-2026-74499: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (bsc#1275959).\n- CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74585: thunderbolt: Bound the DROM dual link port number before indexing sw-\u003eports (bsc#1277881).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74682: ALSA: usb-audio: fix OOB write on Type II inbound URBs (bsc#1276934).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74691: net: thunderbolt: Tear down DMA paths before stopping the rings (bsc#1276925).\n- CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80558: libceph: Avoid using invalid osd indices from primary_temp (bsc#1277485).\n- CVE-2026-80561: libceph: fix multiple unsafe decodes in decode_locker() (bsc#1277265).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80798: nfc: llcp: reject PDUs shorter than the LLCP header (bsc#1279809).\n- CVE-2026-80800: nfc: llcp: bound the connect_sn TLV walk to the skb (bsc#1279812).\n- CVE-2026-80829: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (bsc#1279485).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80908: drm/amdgpu: Reject UVD message with dimensions above 4096 (bsc#1279627).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-81005: ipmi: si: Fix NULL pointer dereference after failed registration (bsc#1280230).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: Do not reset transport on data digest errors (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89524: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (bsc#1280581).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89752: mm: memcg: stop reclaim when a limit update is superseded (bsc#1281176).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89870: media: zoran: Avoid freeing a registered video_device twice (bsc#1281352).\n- CVE-2026-89927: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (bsc#1281429).\n- CVE-2026-89929: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90223: nfc: llcp: bound SNL TLV parsing to the skb and add length checks (bsc#1281708).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (git-fixes).\n- default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139).\n- Fix backport of 'RDMA/efa: Fix PBL chunk length computation' Refresh:.\n- gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWM (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- RDMA/efa: Fix PBL chunk length computation.\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- scripts/osc_wrapper: Select repository appropriate for architecture.\n- scripts: Add kernel_repos.\n- scripts: obsapi: Kick get_kernel_projects from uploader \n- scripts: obsapi: Kick get_project_repo_archs from uploader \n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb3: missing inode locks in punch hole (git-fixes).\n- smb: client: reject overlapping data areas in SMB2 responses (git-fixes).\n- xfs: don't drain buffer lru on freeze and read-only remount (bsc#1280223).\n","status":"published","published":"2026-10-15T12:38:33Z","modified":"2026-10-16T10:30:20.089916452Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4706-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538).\n- CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-\u003enocb_cb_kthread pointer (bsc#1254408).\n- CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474).\n- CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602).\n- CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747).\n- CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410).\n- CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).\n- CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464).\n- CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373).\n- CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648).\n- CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848).\n- CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).\n- CVE-2026-52912: netfilter: nf_queue: hold bridge skb-\u003edev while queued (bsc#1269000).\n- CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).\n- CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816).\n- CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817).\n- CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906).\n- CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).\n- CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).\n- CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check\n  (bsc#1272890).\n- CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).\n- CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471).\n- CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).\n- CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847).\n- CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).\n- CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).\n- CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750).\n- CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).\n- CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).\n- CVE-2026-64173: tracing: Do not call map-\u003eops-\u003eelt_free() if elt_alloc() fails (bsc#1272145).\n- CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215).\n- CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899).\n- CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793).\n- CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953).\n- CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870).\n- CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938).\n- CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976).\n- CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339).\n- CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420).\n- CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889).\n- CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776).\n- CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258).\n- CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512).\n- CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522).\n- CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320).\n- CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316).\n- CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319).\n- CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245).\n- CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999).\n- CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847).\n- CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309).\n- CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251).\n- CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036).\n- CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037).\n- CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494).\n- CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730).\n- CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238).\n- CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).\n- CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890).\n- CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588).\n- CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).\n- CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866).\n- CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142).\n- CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137).\n- CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129).\n- CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977).\n- CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092).\n- CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).\n- CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836).\n- CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824).\n- CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900).\n- CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776).\n- CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838).\n- CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287).\n- CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295).\n- CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388).\n- CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504).\n- CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495).\n- CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783).\n- CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).\n- CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852).\n- CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865).\n- CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793).\n- CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923).\n- CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078).\n- CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801).\n- CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803).\n- CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814).\n- CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818).\n- CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821).\n- CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249).\n- CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148).\n- CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149).\n- CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153).\n- CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542).\n- CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit-failure path (bsc#1277179).\n- CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543).\n- CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314).\n- CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321).\n- CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349).\n- CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).\n- CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535).\n- CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545).\n- CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549).\n- CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).\n- CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574).\n- CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).\n- CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234).\n- CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544).\n- CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233).\n- CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231).\n- CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).\n- CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556).\n- CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218).\n- CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217).\n- CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215).\n- CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615).\n- CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655).\n- CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656).\n- CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662).\n- CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674).\n- CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).\n- CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).\n- CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924).\n- CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748).\n- CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143).\n- CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972).\n- CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).\n- CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761).\n- CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764).\n- CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773).\n- CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).\n- CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783).\n- CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007).\n- CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784).\n- CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822).\n- CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009).\n- CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823).\n- CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818).\n- CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857).\n- CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump (bsc#1277128).\n- CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381).\n- CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553).\n- CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031).\n- CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035).\n- CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122).\n- CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).\n- CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120).\n- CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053).\n- CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054).\n- CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056).\n- CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245).\n- CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874).\n- CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115).\n- CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876).\n- CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114).\n- CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100).\n- CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109).\n- CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108).\n- CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108).\n- CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).\n- CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092).\n- CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229).\n- CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).\n- CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766).\n- CVE-2026-72491: net/9p: fix race condition on rdma-\u003estate in trans_rdma.c (bsc#1276947).\n- CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).\n- CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535).\n- CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532).\n- CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538).\n- CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).\n- CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n  (bsc#1276519).\n- CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508).\n- CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512).\n- CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).\n- CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474).\n- CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473).\n- CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475).\n- CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468).\n- CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471).\n- CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460).\n- CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461).\n- CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462).\n- CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).\n- CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905).\n- CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880).\n- CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891).\n- CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876).\n- CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866).\n- CVE-2026-74330: configfs: fix lockless traversals of -\u003es_children (bsc#1277129).\n- CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155).\n- CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180).\n- CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063).\n- CVE-2026-74359: configfs_lookup(): don't leave -\u003es_dentry dangling on failure (bsc#1278067).\n- CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070).\n- CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225).\n- CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649).\n- CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401).\n- CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).\n- CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).\n- CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).\n- CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405).\n- CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255).\n- CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098).\n- CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).\n- CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087).\n- CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088).\n- CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091).\n- CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098).\n- CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410).\n- CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).\n- CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564).\n- CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210).\n- CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211).\n- CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215).\n- CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216).\n- CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178).\n- CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070).\n- CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801).\n- CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805).\n- CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792).\n- CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781).\n- CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340).\n- CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339).\n- CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341).\n- CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).\n- CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353).\n- CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892).\n- CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349).\n- CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352).\n- CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337).\n- CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338).\n- CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956).\n- CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953).\n- CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802).\n- CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804).\n- CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801).\n- CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812).\n- CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799).\n- CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682).\n- CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681).\n- CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694).\n- CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680).\n- CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684).\n- CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690).\n- CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).\n- CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567).\n- CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559).\n- CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885).\n- CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820).\n- CVE-2026-74588: sctp: keep chunk-\u003etransport in step with the list it is queued on (bsc#1277766).\n- CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904).\n- CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900).\n- CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843).\n- CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910).\n- CVE-2026-74597: ip6_tunnel: clear skb2-\u003ecb in ip6ip6_err() (bsc#1277493).\n- CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918).\n- CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640).\n- CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896).\n- CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915).\n- CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796).\n- CVE-2026-74609: tipc: read le-\u003elink under the node lock in tipc_node_link_down() (bsc#1277906).\n- CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505).\n- CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901).\n- CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813).\n- CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862).\n- CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036).\n- CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191).\n- CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195).\n- CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199).\n- CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371).\n- CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372).\n- CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374).\n- CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296).\n- CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272).\n- CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311).\n- CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407).\n- CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032).\n- CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396).\n- CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392).\n- CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489).\n- CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314).\n- CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930).\n- CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897).\n- CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626).\n- CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921).\n- CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).\n- CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579).\n- CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570).\n- CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573).\n- CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()\n  (bsc#1276572).\n- CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563).\n- CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565).\n- CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030).\n- CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898).\n- CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247).\n- CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).\n- CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094).\n- CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315).\n- CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590).\n- CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268).\n- CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).\n- CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342).\n- CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328).\n- CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335).\n- CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).\n- CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205).\n- CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308).\n- CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558).\n- CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513).\n- CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331).\n- CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).\n- CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555).\n- CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324).\n- CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557).\n- CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416).\n- CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (bsc#1278245).\n- CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395).\n- CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).\n- CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840).\n- CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837).\n- CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845).\n- CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860).\n- CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452).\n- CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716).\n- CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).\n- CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733).\n- CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536).\n- CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708).\n- CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590).\n- CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619).\n- CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621).\n- CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799).\n- CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811).\n- CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580).\n- CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819).\n- CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875).\n- CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835).\n- CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888).\n- CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786).\n- CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878).\n- CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850).\n- CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581).\n- CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532).\n- CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535).\n- CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525).\n- CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527).\n- CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497).\n- CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).\n- CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143).\n- CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239).\n- CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298).\n- CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299).\n- CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296).\n- CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309).\n- CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263).\n- CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375).\n- CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379).\n- CVE-2026-89451: iommu/sva: Set handle-\u003edev before the SVA handle is visible (bsc#1280383).\n- CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384).\n- CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338).\n- CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786).\n- CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449).\n- CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451).\n- CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350).\n- CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456).\n- CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544).\n- CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551).\n- CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508).\n- CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288).\n- CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738).\n- CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985).\n- CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993).\n- CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711).\n- CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716).\n- CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717).\n- CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719).\n- CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388).\n- CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).\n- CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758).\n- CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548).\n- CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546).\n- CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726).\n- CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf-\u003elen to avoid underflow (bsc#1280727).\n- CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797).\n- CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733).\n- CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577).\n- CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923).\n- CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793).\n- CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496).\n- CVE-2026-89636: smb: client: clear ce-\u003etgthint in free_tgts() (bsc#1281042).\n- CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046).\n- CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054).\n- CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509).\n- CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518).\n- CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057).\n- CVE-2026-89671: nfsd: gate nfs3 setacl by argp-\u003emask (bsc#1280252).\n- CVE-2026-89672: nfsd: gate nfs2 setacl by argp-\u003emask (bsc#1280235).\n- CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237).\n- CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243).\n- CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206).\n- CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178).\n- CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184).\n- CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151).\n- CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146).\n- CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148).\n- CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077).\n- CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487).\n- CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490).\n- CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468).\n- CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455).\n- CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870).\n- CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872).\n- CVE-2026-89780: net: qualcomm: rmnet: restore skb-\u003edev on deaggregated frames (bsc#1280969).\n- CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224).\n- CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226).\n- CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383).\n- CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201).\n- CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202).\n- CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358).\n- CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter (bsc#1281359).\n- CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427).\n- CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229).\n- CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231).\n- CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273).\n- CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295).\n- CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927).\n- CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660).\n- CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496).\n- CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).\n- CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514).\n- CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546).\n- CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955).\n- CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599).\n- CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644).\n- CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964).\n- CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818).\n- CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808).\n- CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795).\n- CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717).\n- CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683).\n- CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682).\n- CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845).\n- CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694).\n- CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).\n- CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922).\n- CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054).\n- CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777).\n- CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778).\n- CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732).\n- CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050).\n- CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786).\n- CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789).\n- CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825).\n- CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197).\n- CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113).\n- CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110).\n- CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143).\n- CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973).\n- CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013).\n- CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003).\n- CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993).\n- CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072).\n- CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193).\n- CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383).\n- CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988).\n- CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034).\n- CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040).\n- CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041).\n- CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042).\n- CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995).\n- CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997).\n- CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271).\n- CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe-\u003edma.sge[] (bsc#1282270).\n- CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020).\n- CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170).\n- CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286).\n- CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284).\n- CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399).\n- CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408).\n- CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379).\n- CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387).\n- CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104).\n- CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672).\n- CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774).\n- CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812).\n- CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810).\n- CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906).\n- CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154).\n- CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213).\n- CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767).\n- CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891).\n- CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803).\n- CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975).\n- CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176).\n- CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230).\n- CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500).\n- CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201).\n- CVE-2026-97934: tracing: Fix memory corruption from a 'STACKTRACE' histogram key (bsc#1282997).\n- CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163).\n- CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130).\n- CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing -\u003eci_dentry (bsc#1283121).\n- CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312).\n- CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489).\n- CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973).\n- CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805).\n- CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935).\n- CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881).\n\nThe following non security issues were fixed:\n\n- accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes).\n- accel/qaic: Address potential out-of-bounds read in resp_worker() (git-fixes).\n- ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable-fixes).\n- ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes).\n- ACPICA: add boundary checks in two places (stable-fixes).\n- ACPICA: Add package limit checks in parser functions (stable-fixes).\n- ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable-fixes).\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable-fixes).\n- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes).\n- ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes).\n- ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable-fixes).\n- ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable-fixes).\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable-fixes).\n- ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable-fixes).\n- ACPICA: Prevent adding invalid references (stable-fixes).\n- ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable-fixes).\n- ACPICA: validate handler object type in two places (stable-fixes).\n- ALSA: 6fire: Clean ups with guard() (stable-fixes).\n- ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes).\n- ALSA: aloop: Check card index validity at probe (stable-fixes).\n- ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes).\n- ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes).\n- ALSA: caiaq: Fix potential double-free at error path (git-fixes).\n- ALSA: caiaq: unregister the input device when probe fails (git-fixes).\n- ALSA: core: Add scoped cleanup helper for card references (stable-fixes).\n- ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes).\n- ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes).\n- ALSA: dummy: Report a change when one capture switch channel moves (git-fixes).\n- ALSA: es18xx: check control allocation before private data setup (stable-fixes).\n- ALSA: harmony: initialize locks before requesting IRQ (git-fixes).\n- ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes).\n- ALSA: hda/common: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes).\n- ALSA: hda/core: Use guard() for mutex locks (stable-fixes).\n- ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes).\n- ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes).\n- ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes).\n- ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes).\n- ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes).\n- ALSA: hda: Report a change when only the channel status bytes move (git-fixes).\n- ALSA: hda: restore MFG widget enumeration after core split (git-fixes).\n- ALSA: hda: trace PCM open only after assigning a stream (git-fixes).\n- ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git-fixes).\n- ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes).\n- ALSA: line6: reject oversized playback packets (git-fixes).\n- ALSA: mpu401: Check card index validity at probe (stable-fixes).\n- ALSA: mts64: Check card index validity at probe (stable-fixes).\n- ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes).\n- ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git-fixes).\n- ALSA: pcm: set timer-\u003eprivate_data before registering the PCM timer (git-fixes).\n- ALSA: portman2x4: Check card index validity at probe (stable-fixes).\n- ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes).\n- ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes).\n- ALSA: seq: Serialize compat port-info ioctls (git-fixes).\n- ALSA: serial-u16550: Check card index validity at probe (stable-fixes).\n- ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes).\n- ALSA: ump: Copy FB name string more safely (stable-fixes).\n- ALSA: ump: Copy safe string name to rawmidi (stable-fixes).\n- ALSA: ump: Update rawmidi name per EP name update (stable-fixes).\n- ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes).\n- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable-fixes).\n- ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes).\n- ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable-fixes).\n- ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes).\n- ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes).\n- ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes).\n- ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes).\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes).\n- ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes).\n- ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes).\n- ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes).\n- ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes).\n- ALSA: virmidi: Check card index validity at probe (stable-fixes).\n- ALSA: virtio: reset device before deleting virtqueues (git-fixes).\n- Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ('Disable CONFIG_BATMAN_ADV (jsc#PED-16892)').\n- arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes).\n- arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes).\n- arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes).\n- arm64: percpu: Fix this_cpu_and() mask generation (git-fixes).\n- arm64: percpu: Fix this_cpu_write() casting (git-fixes).\n- arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes).\n- ASoC: ab8500: Correct digital interface format setup (git-fixes).\n- ASoC: ab8500: Repair the DAPM capture graph (git-fixes).\n- ASoC: ab8500: Reset the audio block before configuring it (git-fixes).\n- ASoC: ab8500: Validate and program TDM slots correctly (git-fixes).\n- ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git-fixes).\n- ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes).\n- ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes).\n- ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes).\n- ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes).\n- ASoC: codecs: max98363: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes).\n- ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes).\n- ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes).\n- ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes).\n- ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config-\u003etype (git-fixes).\n- ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes).\n- ASoC: Intel: avs: Clean up streams if their initialization fails (git-fixes).\n- ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes).\n- ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes).\n- ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes).\n- ASoC: Intel: catpt: Complete coredump handling (stable-fixes).\n- ASoC: Intel: SST: Publish the PCI module aliases (git-fixes).\n- ASoC: mt6351: Publish the OF module alias (git-fixes).\n- ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git-fixes).\n- ASoC: qcom: q6apm: return error code to consumers on failures (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes).\n- ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes).\n- ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes).\n- ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes).\n- ASoC: sprd: validate compress buffer sizes against fixed allocations (git-fixes).\n- ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes).\n- ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes).\n- ASoC: ti: omap3pandora: update board check to use DT compatible (stable-fixes).\n- ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes).\n- ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes).\n- ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes).\n- ASoC: ux500: Program the MSP FIFO watermarks (git-fixes).\n- ASoC: ux500: Propagate MSP setup errors (git-fixes).\n- ASoC: ux500: Request the MSP MMIO resource (git-fixes).\n- ASoC: ux500: Validate MSP DAI configuration (git-fixes).\n- ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git-fixes).\n- ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes).\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes).\n- Bluetooth: btintel: bound firmware ID by TLV length (git-fixes).\n- Bluetooth: btintel: Export few static functions (stable-fixes).\n- Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git-fixes).\n- Bluetooth: btintel: Print firmware SHA1 (stable-fixes).\n- Bluetooth: btintel: validate version TLV value lengths (git-fixes).\n- Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes).\n- Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git-fixes).\n- Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes).\n- Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes).\n- Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git-fixes).\n- Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes).\n- Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes).\n- Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes).\n- Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes).\n- Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes).\n- Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes).\n- Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes).\n- Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes).\n- Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes).\n- Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes).\n- Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes).\n- Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable-fixes).\n- Bluetooth: btusb: refactor endpoint lookup (stable-fixes).\n- Bluetooth: coredump: Quiesce dump work on unregister (git-fixes).\n- Bluetooth: eir: validate service data length before reading UUID (git-fixes).\n- Bluetooth: hci_codec: validate vendor codec count length (git-fixes).\n- Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes).\n- Bluetooth: hci_core: Fix race condition during device registration (git-fixes).\n- Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes).\n- Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes).\n- Bluetooth: hci_sock: validate event length before filtering (git-fixes).\n- Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes).\n- Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes).\n- Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes).\n- Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes).\n- Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes).\n- Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes).\n- Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git-fixes).\n- Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git-fixes).\n- Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes).\n- Bluetooth: L2CAP: validate frame length before control and FCS access (git-fixes).\n- Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git-fixes).\n- Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes).\n- Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git-fixes).\n- Bluetooth: RFCOMM: fix NULL dereference of dlc-\u003esession in RFCOMM_CONNINFO (git-fixes).\n- Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git-fixes).\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes).\n- Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes).\n- bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes).\n- bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes).\n- bnxt_en: use irq_update_affinity_hint() (bsc#1280750).\n- bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823).\n- bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes).\n- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes).\n- char/nvram: Remove redundant nvram_mutex (stable-fixes).\n- compiler_types: Introduce __flex_counter() and family (bsc#1280139).\n- default_gfp(): avoid using the 'newfangled' __VA_OPT__ trick (bsc#1280139).\n- dm/amdgpu: fix malformed link_settings debugfs output (git-fixes).\n- dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable-fixes).\n- dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes).\n- dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes).\n- dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git-fixes).\n- dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes).\n- dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes).\n- dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git-fixes).\n- dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes).\n- dmaengine: wait for RCU readers before releasing dma_device (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes).\n- dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git-fixes).\n- driver core: Better advertise dev_err_probe() (stable-fixes).\n- driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes).\n- drm/amd/display: Bump frame warning limit for clang builds of dml (stable-fixes).\n- drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git-fixes).\n- drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes).\n- drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes).\n- drm/amd/display: Find link encoder for flexible DIG mapping cases (stable-fixes).\n- drm/amd/display: Fix CRC open failure during active rendering (stable-fixes).\n- drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git-fixes).\n- drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes).\n- drm/amd/display: Fix DPMS using partially updated pipe context (stable-fixes).\n- drm/amd/display: Initialize dsc_caps to 0 (stable-fixes).\n- drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git-fixes).\n- drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes).\n- drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes).\n- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes).\n- drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes).\n- drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git-fixes).\n- drm/amd/pm: hide pp_table sysfs on APUs (git-fixes).\n- drm/amdgpu: add a helper to calculate ring distance (stable-fixes).\n- drm/amdgpu: check ras and obj before dereference (git-fixes).\n- drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes).\n- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146).\n- drm/amdgpu: Failed to check various return code (stable-fixes).\n- drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes).\n- drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes).\n- drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes).\n- drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes).\n- drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git-fixes).\n- drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes).\n- drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes).\n- drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes).\n- drm/amdgpu: increase hmm range get pages timeout (stable-fixes).\n- drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable-fixes).\n- drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes).\n- drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes).\n- drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes).\n- drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes).\n- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes).\n- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable-fixes).\n- drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes).\n- drm/amdkfd: check find_first_zero_bit before __set_bit on kfd-\u003edoorbell_bitmap (stable-fixes).\n- drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes).\n- drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes).\n- drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes).\n- drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes).\n- drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes).\n- drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes).\n- drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable-fixes).\n- drm/ast: Automatically clean up poll helper (stable-fixes).\n- drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes).\n- drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable-fixes).\n- drm/cirrus: Use video aperture helpers (stable-fixes).\n- drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable-fixes).\n- drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes).\n- drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes).\n- drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes).\n- drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes).\n- drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes).\n- drm/gud: NUL-terminate TV mode names read from the device (git-fixes).\n- drm/gud: validate TV mode names before creating enum property (git-fixes).\n- drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes).\n- drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git-fixes).\n- drm/i915: fix incorrect RCU teardown order (git-fixes).\n- drm/i915: Fix memory leak in query_perf_config_list() (git-fixes).\n- drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes).\n- drm/imagination: clamp freelist reconstruction requests (git-fixes).\n- drm/imagination: Fix page count for page table for map() interface (git-fixes).\n- drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes).\n- drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes).\n- drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes).\n- drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git-fixes).\n- drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes).\n- drm/mediatek: Fix ovl adaptor platform device leak (git-fixes).\n- drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes).\n- drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes).\n- drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes).\n- drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes).\n- drm/nouveau/bios: skip the IFR header if present (stable-fixes).\n- drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git-fixes).\n- drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes).\n- drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git-fixes).\n- drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes).\n- drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git-fixes).\n- drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes).\n- drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes).\n- drm/nouveau: fix autosuspend cleanup during teardown (git-fixes).\n- drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes).\n- drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes).\n- drm/nouveau: Fix gem reference leak in validate_init() (git-fixes).\n- drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes).\n- drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes).\n- drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes).\n- drm/nouveau: Use write-combined maps for coherent (git-fixes).\n- drm/omap: dsi: Do not copy isr table (git-fixes).\n- drm/panel: Enable GPIOLIB for panels which uses functions from it (stable-fixes).\n- drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes).\n- drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes).\n- drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes).\n- drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes).\n- drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes).\n- drm/virtio: fix memory leak of fence event on execbuffer failure (git-fixes).\n- drm/virtio: fix NULL pointer dereference on fence allocation failure (git-fixes).\n- drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git-fixes).\n- drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes).\n- drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes).\n- drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git-fixes).\n- drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes).\n- drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes).\n- drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564).\n- drm: add drm_memory_stats_is_zero (stable-fixes).\n- drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git-fixes).\n- drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git-fixes).\n- drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes).\n- EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968).\n- EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968).\n- efi: fix stale reference to efi_recover_from_page_fault() (git-fixes).\n- fbcon: don't suspend/resume when vc is graphics mode (stable-fixes).\n- fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes).\n- fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes).\n- fbdev: vfb: defer cleanup until the last reference (git-fixes).\n- firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes).\n- firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes).\n- firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes).\n- firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes).\n- firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes).\n- firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable-fixes).\n- gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git-fixes).\n- gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes).\n- gpio: pisosr: Read 'ngpios' as u32 (stable-fixes).\n- gpio: zynq: fix runtime PM leak on request error path (git-fixes).\n- HID: alps: fix use-after-free on input2 registration failure (git-fixes).\n- HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes).\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable-fixes).\n- HID: elecom: fix bus type for M-XGL20DLBK (git-fixes).\n- HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes).\n- HID: ft260: validate i2c input report length (stable-fixes).\n- HID: i2c-hid: Fix '(null)' output when reading report descriptor fails (git-fixes).\n- HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable-fixes).\n- HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report-descriptor (stable-fixes).\n- HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes).\n- HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes).\n- HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable-fixes).\n- HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes).\n- HID: mcp2221: stop device IO before hid_hw_stop (git-fixes).\n- HID: pidff: Support device error response from PID_BLOCK_LOAD (stable-fixes).\n- HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable-fixes).\n- HID: rmi: fix OOB access with undersized RMI reports (git-fixes).\n- HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes).\n- HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes).\n- host1x: bus: Fix missing ops null check in error teardown (stable-fixes).\n- hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes).\n- hwmon: (applesmc) fix key backlight workqueue leak on register failure (git-fixes).\n- hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes).\n- hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes).\n- hwmon: (emc1403) Add support for EMC1442 (stable-fixes).\n- hwmon: (emc1403) Convert to with_info API (stable-fixes).\n- hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes).\n- hwmon: (emc1403) Rely on subsystem locking (stable-fixes).\n- hwmon: (emc1403) Support 11 bit accuracy (stable-fixes).\n- hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes).\n- hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git-fixes).\n- hwmon: (gpio-fan) take fan_data-\u003elock in gpio_fan_shutdown() (git-fixes).\n- hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes).\n- hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable-fixes).\n- hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes).\n- hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes).\n- hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes).\n- hwmon: (w83793) release probe data through kref (git-fixes).\n- i2c: at91: release DMA channels on remove and probe error (git-fixes).\n- i2c: atr: fix dangling adapter pointer on add failure (git-fixes).\n- i2c: core: fix adapter registration race (git-fixes).\n- i2c: core: fix irq domain leak on adapter registration failure (git-fixes).\n- i2c: imx: disable autosuspend on remove (git-fixes).\n- i2c: imx: release DMA channels on probe error (git-fixes).\n- i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes).\n- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions \u003c 1.1 (git-fixes).\n- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable-fixes).\n- i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes).\n- ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852).\n- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854).\n- ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854).\n- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854).\n- ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes).\n- ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes).\n- ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes).\n- iio: accel: kionix-kx022a: Fix array boundary check (git-fixes).\n- iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes).\n- iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable-fixes).\n- iio: accel: sca3000: fix frequency divider condition check (git-fixes).\n- iio: adc: max1363: sign-extend bipolar differential channel reads (git-fixes).\n- iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes).\n- iio: adc: stm32-adc: fix check on internal channel availability (git-fixes).\n- iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes).\n- iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git-fixes).\n- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes).\n- iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git-fixes).\n- iio: buffer: serialize buffer teardown with mode claims (git-fixes).\n- iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes).\n- iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16400: fix unprotected debugfs reads (git-fixes).\n- iio: imu: adis16480: fix unprotected debugfs reads (git-fixes).\n- iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes).\n- iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes).\n- iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes).\n- iio: proximity: isl29501: Fix return type of isl29501_register_write (git-fixes).\n- iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes).\n- iio: proximity: sx9324: Correct proximity channel resolution (git-fixes).\n- iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes).\n- iio: trigger: cancel reenable_work before freeing trigger (git-fixes).\n- inode: make __iget() a static inline (bsc#1282383).\n- Input: adp5588-keys - cache GPIO state before registering the gpiochip (git-fixes).\n- Input: aiptek - validate raw macro indices before updating state (stable-fixes).\n- Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git-fixes).\n- Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes).\n- Input: eeti_ts - publish the OF module alias (git-fixes).\n- Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes).\n- Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes).\n- Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git-fixes).\n- Input: s6sy761 - fix resume ordering and restore sensing (git-fixes).\n- Input: soc_button_array - check btns_desc-\u003epackage.count (git-fixes).\n- Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes).\n- Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes).\n- Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes).\n- Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git-fixes).\n- Input: trackpoint - fix the inertia attribute name in the ABI document (git-fixes).\n- Input: xpad - add support for Azeron devices (stable-fixes).\n- Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes).\n- Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes).\n- Input: zero ff_effect before compat copy in input_ff_effect_from_user (git-fixes).\n- integrity: Check for NULL returned by asymmetric_key_public_key (stable-fixes).\n- iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes).\n- kernel-binary.spec.in: Fix syntax error.\n- KEYS: encrypted: fix integer overflow of datablob_len (git-fixes).\n- keys: fix lost wakeup when reaping a dead key type (git-fixes).\n- KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes).\n- KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes).\n- KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes).\n- KVM: nVMX: Always flush vpid02 on first use (git-fixes).\n- KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git-fixes).\n- KVM: s390: pci: Fix aisb calculation (bsc#1277451).\n- KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451).\n- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451).\n- KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451).\n- KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451).\n- KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451).\n- KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451).\n- KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451).\n- KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451).\n- KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451).\n- KVM: VMX: Prioritize DR7.GD=1 #DB over CPL\u003e0 #GP on Intel (git-fixes).\n- KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes).\n- KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes).\n- KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git-fixes).\n- KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes).\n- KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes).\n- KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes).\n- KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git-fixes).\n- KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes).\n- leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes).\n- leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes).\n- media: dm1105: fix missing error check for dma_alloc_coherent (stable-fixes).\n- media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes).\n- media: hevc: add bounded tile-count helpers (git-fixes).\n- media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes).\n- media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes).\n- media: rc: mceusb: Add support for 04eb:e033 (stable-fixes).\n- media: v4l2-ctrls: validate AV1 tile counts (git-fixes).\n- media: v4l2-ctrls: validate HEVC tile counts (git-fixes).\n- media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git-fixes).\n- media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes).\n- media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git-fixes).\n- media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes).\n- media: video-i2c: fix buffer queue ordering (stable-fixes).\n- media: video-i2c: use vb2_video_unregister_device on driver removal (stable-fixes).\n- memstick: ms_block: destroy io_queue workqueue on removal (git-fixes).\n- mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes).\n- mfd: rsmu: Add 8a34002 support (stable-fixes).\n- mmc: core: Add validation for host-provided max_segs (stable-fixes).\n- mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes).\n- mmc: core: Fix OF node reference leak on card add failure (git-fixes).\n- mmc: davinci: avoid NULL deref of host-\u003edata in IRQ handler (stable-fixes).\n- mmc: davinci: fix mmc_add_host order in probe (stable-fixes).\n- mmc: hsq: Fix use-after-free in retry work (git-fixes).\n- mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes).\n- mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes).\n- mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable-fixes).\n- mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git-fixes).\n- mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes).\n- mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes).\n- mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git-fixes).\n- mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes).\n- mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git-fixes).\n- mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes).\n- mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes).\n- net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852).\n- net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852).\n- net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852).\n- net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852).\n- net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852).\n- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes).\n- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes).\n- net: mana: restore the XDP program pointer when pre-allocation fails (git-fixes).\n- net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes).\n- net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401).\n- net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes).\n- net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes).\n- net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes).\n- net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes).\n- net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes).\n- net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes).\n- net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes).\n- net: usb: sr9700: include receive overhead in the length check (git-fixes).\n- net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes).\n- net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes).\n- net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes).\n- net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git-fixes).\n- nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes).\n- nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes).\n- nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git-fixes).\n- nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes).\n- nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes).\n- nfc: llcp: fix slab-out-of-bounds reads when logging service names (git-fixes).\n- nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes).\n- nfc: nfcmrvl: validate helper command length before pull (git-fixes).\n- nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes).\n- nfc: port100: reject frames whose declared length exceeds the received data (git-fixes).\n- nfc: st21nfca: validate ISO15693 inventory length (git-fixes).\n- nfc: st21nfca: validate received frame size (git-fixes).\n- nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes).\n- nvme-tcp: fix usage of page_frag_cache (bsc#1267882).\n- of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes).\n- of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes).\n- PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes).\n- PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable-fixes).\n- PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes).\n- PCI/proc: Warn on writes to kernel-exclusive config space regions (stable-fixes).\n- PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes).\n- PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes).\n- PCI: altera: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes).\n- PCI: iproc: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes).\n- PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes).\n- PCI: switchtec: Add Gen6 Device IDs (stable-fixes).\n- PCI: Wait for device readiness after D3hot -\u003e D0uninitialized transition (stable-fixes).\n- PCI: xgene: Drop unnecessary OF node reference (git-fixes).\n- PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes).\n- perf: Reject exited events as group leaders (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git-fixes).\n- phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git-fixes).\n- pinctrl: meson: Fix typo in s4 group name (git-fixes).\n- pinctrl: single: free the IRQ on domain creation failure (git-fixes).\n- platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes).\n- platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes).\n- platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes).\n- platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes).\n- power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes).\n- power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git-fixes).\n- power: supply: sc2731_charger: cancel work on remove (git-fixes).\n- power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes).\n- powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979).\n- powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git-fixes).\n- powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906).\n- powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906).\n- powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979).\n- powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906).\n- powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979).\n- powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git-fixes).\n- powerpc: Add Power12 architected mode (jsc#PED-16906).\n- powerpc: Add Power12 raw mode (jsc#PED-16906).\n- RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes).\n- RDMA/core: Fix potential use after free in counter_release() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git-fixes).\n- RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes).\n- RDMA/core: Fix use after free in ib_query_qp() (git-fixes).\n- RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes).\n- RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes).\n- RDMA/hfi1: Align probe error unwinding with device removal (git-fixes).\n- RDMA/hfi1: Allocate device data after PCI initialization (git-fixes).\n- RDMA/hfi1: Create workqueues before device initialization (git-fixes).\n- RDMA/hfi1: Defer device creation until probe succeeds (git-fixes).\n- RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes).\n- RDMA/hfi1: Free RX data on late probe failure (git-fixes).\n- RDMA/hfi1: Initialize debugfs after probe completes (git-fixes).\n- RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes).\n- RDMA/hfi1: Preserve unit 0 on (git-fixes).\n- RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes).\n- RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes).\n- RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes).\n- RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes).\n- RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes).\n- RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes).\n- RDMA/rvt: Return NULL after port allocation failure (git-fixes).\n- ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896).\n- rtc: aspeed: add AST2700 compatible (stable-fixes).\n- rtc: bq32000: add delay between RTC reads (stable-fixes).\n- selftests/alsa: Fix the step check for INTEGER controls (git-fixes).\n- selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401).\n- selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401).\n- serial: 8250: fix possible ISR soft lockup (stable-fixes).\n- serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes).\n- serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes).\n- serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git-fixes).\n- slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139).\n- slab: Introduce kmalloc_flex() and family (bsc#1280139).\n- slab: Introduce kmalloc_obj() and family (bsc#1280139).\n- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139).\n- smb: client: harden DFS cache against invalid target hints (git-fixes).\n- soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes).\n- soundwire: cadence_master: wait and cancel cdns-\u003ework before clock stop (git-fixes).\n- soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes).\n- soundwire: intel: Move suspend tracking from trigger to pm suspend (stable-fixes).\n- soundwire: only handle alert events when the peripheral is attached (stable-fixes).\n- soundwire: validate DT compatible before parsing it (stable-fixes).\n- spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes).\n- spi: core: Abort active target transfer on controller suspend (stable-fixes).\n- spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes).\n- spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes).\n- spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes).\n- spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable-fixes).\n- spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes).\n- staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes).\n- staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes).\n- thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes).\n- thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes).\n- thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes).\n- thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes).\n- thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes).\n- thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable-fixes).\n- thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes).\n- thunderbolt: Keep the domain reference while processing hotplug (stable-fixes).\n- thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes).\n- thunderbolt: Reject oversized XDomain properties responses (git-fixes).\n- thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes).\n- thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped (stable-fixes).\n- thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes).\n- tls: add counters for rekey (bsc#1267564 jsc#PED-16401).\n- tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401).\n- tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401).\n- tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401).\n- tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes).\n- tty: vt: fix memory leak in vc_allocate() (git-fixes).\n- usb-storage: ene_ub6250: fix race between scan work and probe (stable-fixes).\n- USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes).\n- USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes).\n- USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable-fixes).\n- usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes).\n- usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes).\n- usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (git-fixes).\n- usb: core: Add lock to usb_wakeup_notification() (stable-fixes).\n- usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git-fixes).\n- usb: core: hcd: fix possible deadlock in rh control transfers (stable-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (git-fixes).\n- usb: core: Strengthen error handling in hub_hub_status() (stable-fixes).\n- usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git-fixes).\n- usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes).\n- usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes).\n- usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes).\n- usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable-fixes).\n- usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes).\n- usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes).\n- USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git-fixes).\n- usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes).\n- usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes).\n- USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable-fixes).\n- usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes).\n- usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log (stable-fixes).\n- usb: gadget: udc: skip pullup() if already connected (stable-fixes).\n- usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes).\n- usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes).\n- usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes).\n- USB: make to_usb_driver() use container_of_const() (stable-fixes).\n- usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes).\n- usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes).\n- usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes).\n- usb: ohci-st: disable controller wakeup on removal (git-fixes).\n- USB: serial: fix driver deregistration order (git-fixes).\n- USB: serial: fix dynamic id driver deregistration race (git-fixes).\n- USB: serial: fix port tear down use-after-free (git-fixes).\n- USB: serial: quatech2: fix baud rate overflow (git-fixes).\n- usb: serial: spcp8x5: don't store usb_device_id (stable-fixes).\n- USB: serial: ssu100: fix baud rate overflow (git-fixes).\n- usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes).\n- usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git-fixes).\n- usb: typec: tcpm: recover after failure to start the frs ams (git-fixes).\n- usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes).\n- usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes).\n- usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes).\n- usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes).\n- usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes).\n- usb: usbtest: disable dynamic ID support (stable-fixes).\n- usb: usbtmc: don't store usb_device_id (stable-fixes).\n- usb: xhci: use cached HCSPARAMS1 value (stable-fixes).\n- usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes).\n- usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes).\n- watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git-fixes).\n- watchdog: digicolor: Avoid division by zero (git-fixes).\n- watchdog: fix hrtimer start when pretimeout is zero (git-fixes).\n- watchdog: msc313e: Avoid division by zero (git-fixes).\n- watchdog: msc313e: Enable clock before accessing hardware registers (git-fixes).\n- watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git-fixes).\n- watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes).\n- watchdog: msc313e: Fix premature reset during timeout update (git-fixes).\n- watchdog: msc313e: Fix spurious reset on suspend (git-fixes).\n- watchdog: msc313e: Fix undefined behavior (git-fixes).\n- watchdog: msc313e: Propagate error code in resume() (git-fixes).\n- watchdog: msc313e: Sync timeout value if WDT was running at boot (git-fixes).\n- watchdog: rtd119x: Avoid division by zero (git-fixes).\n- watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git-fixes).\n- watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes).\n- wifi: ath9k_htc: don't store usb_device_id (stable-fixes).\n- wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes).\n- wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes).\n- wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes).\n- wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes).\n- wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: ath11k: implement handling of P2P NoA event (stable-fixes).\n- wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes).\n- wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes).\n- wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes).\n- wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git-fixes).\n- wifi: cfg80211: don't filter by BSS type when removing stale entries (git-fixes).\n- wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes).\n- wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes).\n- wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git-fixes).\n- wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes).\n- wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes).\n- wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes).\n- wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes).\n- wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes).\n- wifi: iwlegacy: fix broadcast stations deallocation (git-fixes).\n- wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes).\n- wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes).\n- wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes).\n- wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes).\n- wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable-fixes).\n- wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes).\n- wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes).\n- wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable-fixes).\n- wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes).\n- wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes).\n- wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable-fixes).\n- wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes).\n- wifi: libertas: reject short monitor TX frames (stable-fixes).\n- wifi: libipw: fix key index receive bound checks (stable-fixes).\n- wifi: libipw: reject too-short association responses (git-fixes).\n- wifi: libipw: reject too-short beacon and probe responses (git-fixes).\n- wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes).\n- wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes).\n- wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes).\n- wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes).\n- wifi: mac80211: don't access the TSF of a down interface (git-fixes).\n- wifi: mac80211: don't allow injecting frames wider than the chanctx (git-fixes).\n- wifi: mac80211: don't allow link changes when iface is down (git-fixes).\n- wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes).\n- wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes).\n- wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes).\n- wifi: mac80211: don't start a ROC while scanning (git-fixes).\n- wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes).\n- wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes).\n- wifi: mac80211: mesh: release the channel if start fails (git-fixes).\n- wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes).\n- wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes).\n- wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes).\n- wifi: mac80211: reset state when starting AP fails (git-fixes).\n- wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes).\n- wifi: mac80211: set up the TX info early to fix failure paths (git-fixes).\n- wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes).\n- wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes).\n- wifi: mac80211: validate deauth frame length before reason access (stable-fixes).\n- wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git-fixes).\n- wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes).\n- wifi: mt76: mt7915: set correct background radar capability (stable-fixes).\n- wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes).\n- wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes).\n- wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes).\n- wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes).\n- wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes).\n- wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git-fixes).\n- wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git-fixes).\n- wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes).\n- wifi: mwifiex: validate action frame fixed fields (git-fixes).\n- wifi: mwifiex: validate scan response extents (git-fixes).\n- wifi: nl80211: reject beacons with bad HE operation (stable-fixes).\n- wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes).\n- wifi: p54: validate curve data length in the calibration curve converters (git-fixes).\n- wifi: ralink: RT2X00: init EEPROM properly (stable-fixes).\n- wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes).\n- wifi: rsi: fix heap OOB write on key removal (git-fixes).\n- wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes).\n- wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes).\n- wifi: rtw88: Add NULL check for chip-\u003eedcca_th in rtw_fw_adaptivity_result() (stable-fixes).\n- wifi: rtw88: Fix the random 'error beacon valid' messages for USB (stable-fixes).\n- wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes).\n- wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes).\n- wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes).\n- wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes).\n- wifi: virt_wifi: don't transfer operstate before register (git-fixes).\n- wifi: virt_wifi: free skb when disconnected (git-fixes).\n- wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git-fixes).\n- wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git-fixes).\n- wifi: wlcore: release runtime PM ref on regdomain config failure (git-fixes).\n- x86/mce: Add support for physical address valid bit (jsc#PED-16968).\n- x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455).\n- x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951).\n- x86/tsx: Make tsx_ctrl_state static (bsc#1250951).\n- xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709).\n- xhci: fix lost bounce buffers on TDs spanning several ring segments (git-fixes).\n- xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes).\n","status":"published","published":"2026-10-16T13:33:59Z","modified":"2026-10-17T10:00:05.985817162Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8959-1","title":"linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - USB Gadget drivers;\n  - Memory management;\n  - Multiple devices driver;\n  - ARM64 architecture;\n  - EROFS file system;\n  - Networking core;\n  - eXpress Data Path;\n  - ARM32 architecture;\n  - M68K architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PA-RISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - Speakup Console Speech Driver;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Auxiliary display drivers;\n  - Drivers core;\n  - Micron PCIe SSD driver;\n  - Null block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - AMD CDX bus driver;\n  - Hardware random number generator core;\n  - Character device driver;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - CPU frequency scaling framework;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - ARM SCMI message protocol;\n  - ARM SCPI message protocol;\n  - Google firmware drivers;\n  - Qualcomm firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - HSI subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - On-Chip Interconnect management framework;\n  - IOMMU subsystem;\n  - Industry Pack bus drivers;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Analog Devices digital potentiometer driver;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - Amazon Nitro Secure Module driver;\n  - SGI GRU driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PA-RISC drivers;\n  - PCI subsystem;\n  - Performance monitor drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Chrome hardware platform drivers;\n  - Mellanox platform drivers;\n  - Microsoft Surface platform drivers;\n  - x86 platform drivers;\n  - MediaTek PM domains;\n  - Power sequencing drivers;\n  - Power supply drivers;\n  - Powercap sysfs driver;\n  - PTP clock framework;\n  - PWM drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - RPMSG subsystem;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - ASPEED SoC drivers;\n  - Samsung SoC drivers;\n  - SPI subsystem;\n  - small TFT LCD display modules;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Userspace I/O drivers;\n  - USB DSL drivers;\n  - Cypress C67X00 USB driver;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - Intel La Jolla Cove Adapter USB driver;\n  - Intel USBIO USB I/O expander driver;\n  - USB Serial drivers;\n  - USB Mass Storage drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - W1 Dallas's 1-wire bus driver;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - AFS file system;\n  - BFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - debug file system;\n  - eCrypt file system;\n  - EFI Variable file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - HugeTLB file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Overlay file system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UBI file system;\n  - UDF file system;\n  - XFS file system;\n  - BPF subsystem;\n  - Tracing infrastructure;\n  - Kernel futex primitives;\n  - Memory Management;\n  - VLANs driver;\n  - IPv4 networking;\n  - io_uring subsystem;\n  - KProbes tracing;\n  - KVM subsystem;\n  - Live Update Orchestrator (LUO);\n  - Netfilter;\n  - Perf events;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Networking subsytem;\n  - Slab allocator;\n  - Sun RPC protocol;\n  - Vector I/O iterator library;\n  - Virtio network driver;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IEEE 802.15.4 subsystem;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - NFC subsystem;\n  - SCTP protocol;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - Kernel init infrastructure;\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel crash support code;\n  - DMA mapping infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - IRQ subsystem;\n  - KCOV code coverage framework;\n  - Locking primitives;\n  - Kernel module support;\n  - Namespaces infrastructure;\n  - Kernel command line parsing driver;\n  - PID allocator;\n  - printk logging mechanism;\n  - System reboot mechanism;\n  - Timer subsystem;\n  - Workqueue subsystem;\n  - Kernel build system;\n  - Heterogeneous memory management;\n  - UCS-2 string library;\n  - KASAN memory debugging framework;\n  - 802.1Q VLAN protocol;\n  - Appletalk network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Devlink API;\n  - Distributed Switch Architecture;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - L2TP protocol;\n  - Logical Link layer;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netlink;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - PSP security protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - XFRM subsystem;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Linux Security Modules (LSM) Framework;\n  - Key management;\n  - Landlock security;\n  - SELinux security module;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - Generic sound devices;\n  - HD-audio driver;\n  - ESS ES18xx ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Digigram PCXHR ALSA driver;\n  - AMD SoC Alsa drivers;\n  - Cirrus Logic audio codecs;\n  - QCOM ASoC drivers;\n  - Realtek audio codecs;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - Intel ASoC drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - Rockchip ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - Spreadtrum ASoC drivers;\n  - STI ASoC drivers;\n  - Xilinx ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-100070, CVE-2026-100071, CVE-2026-100072, CVE-2026-100073,\nCVE-2026-100074, CVE-2026-100075, CVE-2026-100076, CVE-2026-100077,\nCVE-2026-100078, CVE-2026-100079, CVE-2026-68451, CVE-2026-68452,\nCVE-2026-68453, CVE-2026-74440, CVE-2026-74441, CVE-2026-74442,\nCVE-2026-74443, CVE-2026-74444, CVE-2026-74445, CVE-2026-74446,\nCVE-2026-74447, CVE-2026-74448, CVE-2026-74449, CVE-2026-74450,\nCVE-2026-74451, CVE-2026-74452, CVE-2026-74453, CVE-2026-74454,\nCVE-2026-74455, CVE-2026-74456, CVE-2026-74457, CVE-2026-74458,\nCVE-2026-74459, CVE-2026-74460, CVE-2026-74461, CVE-2026-74462,\nCVE-2026-74463, CVE-2026-74464, CVE-2026-74465, CVE-2026-74466,\nCVE-2026-74467, CVE-2026-74468, CVE-2026-74469, CVE-2026-74470,\nCVE-2026-74471, CVE-2026-74472, CVE-2026-74473, CVE-2026-74474,\nCVE-2026-74475, CVE-2026-74476, CVE-2026-74477, CVE-2026-74478,\nCVE-2026-74479, CVE-2026-74480, CVE-2026-74481, CVE-2026-74482,\nCVE-2026-74483, CVE-2026-74484, CVE-2026-74485, CVE-2026-74486,\nCVE-2026-74487, CVE-2026-74488, CVE-2026-74490, CVE-2026-74491,\nCVE-2026-74492, CVE-2026-74493, CVE-2026-74494, CVE-2026-74495,\nCVE-2026-74496, CVE-2026-74497, CVE-2026-74498, CVE-2026-74499,\nCVE-2026-74500, CVE-2026-74501, CVE-2026-74502, CVE-2026-74503,\nCVE-2026-74504, CVE-2026-74505, CVE-2026-74506, CVE-2026-74507,\nCVE-2026-74508, CVE-2026-74509, CVE-2026-74510, CVE-2026-74512,\nCVE-2026-74513, CVE-2026-74514, CVE-2026-74515, CVE-2026-74516,\nCVE-2026-74517, CVE-2026-74518, CVE-2026-74519, CVE-2026-74520,\nCVE-2026-74521, CVE-2026-74522, CVE-2026-74523, CVE-2026-74524,\nCVE-2026-74525, CVE-2026-74526, CVE-2026-74528, CVE-2026-74529,\nCVE-2026-74530, CVE-2026-74531, CVE-2026-74532, CVE-2026-74533,\nCVE-2026-74534, CVE-2026-74535, CVE-2026-74536, CVE-2026-74537,\nCVE-2026-74538, CVE-2026-74539, CVE-2026-74540, CVE-2026-74541,\nCVE-2026-74542, CVE-2026-74543, CVE-2026-74544, CVE-2026-74545,\nCVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74550, CVE-2026-74551, CVE-2026-74552, CVE-2026-74553,\nCVE-2026-74554, CVE-2026-74555, CVE-2026-74556, CVE-2026-74557,\nCVE-2026-74558, CVE-2026-74559, CVE-2026-74560, CVE-2026-74561,\nCVE-2026-74562, CVE-2026-74563, CVE-2026-74564, CVE-2026-74565,\nCVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74571,\nCVE-2026-74572, CVE-2026-74573, CVE-2026-74574, CVE-2026-74575,\nCVE-2026-74576, CVE-2026-74577, CVE-2026-74579, CVE-2026-74580,\nCVE-2026-74581, CVE-2026-74582, CVE-2026-74583, CVE-2026-74585,\nCVE-2026-74586, CVE-2026-74587, CVE-2026-74588, CVE-2026-74589,\nCVE-2026-74590, CVE-2026-74591, CVE-2026-74592, CVE-2026-74593,\nCVE-2026-74594, CVE-2026-74595, CVE-2026-74596, CVE-2026-74597,\nCVE-2026-74598, CVE-2026-74599, CVE-2026-74600, CVE-2026-74601,\nCVE-2026-74602, CVE-2026-74603, CVE-2026-74604, CVE-2026-74605,\nCVE-2026-74606, CVE-2026-74607, CVE-2026-74608, CVE-2026-74609,\nCVE-2026-74610, CVE-2026-74611, CVE-2026-74612, CVE-2026-74613,\nCVE-2026-74614, CVE-2026-74615, CVE-2026-74616, CVE-2026-74617,\nCVE-2026-74618, CVE-2026-74619, CVE-2026-74620, CVE-2026-74621,\nCVE-2026-74622, CVE-2026-74623, CVE-2026-74624, CVE-2026-74625,\nCVE-2026-74626, CVE-2026-74627, CVE-2026-74628, CVE-2026-74629,\nCVE-2026-74630, CVE-2026-74631, CVE-2026-74632, CVE-2026-74633,\nCVE-2026-74634, CVE-2026-74635, CVE-2026-74636, CVE-2026-74637,\nCVE-2026-74638, CVE-2026-74639, CVE-2026-74640, CVE-2026-74641,\nCVE-2026-74643, CVE-2026-74644, CVE-2026-74645, CVE-2026-74646,\nCVE-2026-74647, CVE-2026-74648, CVE-2026-74649, CVE-2026-74650,\nCVE-2026-74651, CVE-2026-74652, CVE-2026-74653, CVE-2026-74654,\nCVE-2026-74655, CVE-2026-74656, CVE-2026-74657, CVE-2026-74658,\nCVE-2026-74659, CVE-2026-74660, CVE-2026-74661, CVE-2026-74662,\nCVE-2026-74663, CVE-2026-74664, CVE-2026-74665, CVE-2026-74666,\nCVE-2026-74667, CVE-2026-74668, CVE-2026-74669, CVE-2026-74670,\nCVE-2026-74671, CVE-2026-74672, CVE-2026-74673, CVE-2026-74674,\nCVE-2026-74675, CVE-2026-74676, CVE-2026-74677, CVE-2026-74678,\nCVE-2026-74679, CVE-2026-74680, CVE-2026-74681, CVE-2026-74682,\nCVE-2026-74683, CVE-2026-74684, CVE-2026-74685, CVE-2026-74686,\nCVE-2026-74687, CVE-2026-74688, CVE-2026-74689, CVE-2026-74690,\nCVE-2026-74691, CVE-2026-74692, CVE-2026-74693, CVE-2026-74694,\nCVE-2026-74695, CVE-2026-74696, CVE-2026-74697, CVE-2026-74698,\nCVE-2026-74699, CVE-2026-74700, CVE-2026-74701, CVE-2026-74702,\nCVE-2026-74703, CVE-2026-74704, CVE-2026-74705, CVE-2026-74706,\nCVE-2026-74707, CVE-2026-74708, CVE-2026-74709, CVE-2026-74710,\nCVE-2026-74711, CVE-2026-74712, CVE-2026-74713, CVE-2026-74714,\nCVE-2026-74715, CVE-2026-74716, CVE-2026-74717, CVE-2026-74718,\nCVE-2026-74719, CVE-2026-74720, CVE-2026-74721, CVE-2026-74722,\nCVE-2026-74723, CVE-2026-74724, CVE-2026-74725, CVE-2026-74726,\nCVE-2026-74727, CVE-2026-74728, CVE-2026-74729, CVE-2026-74730,\nCVE-2026-74733, CVE-2026-74734, CVE-2026-74735, CVE-2026-74736,\nCVE-2026-74737, CVE-2026-74738, CVE-2026-74739, CVE-2026-74740,\nCVE-2026-74741, CVE-2026-74742, CVE-2026-74743, CVE-2026-74744,\nCVE-2026-74745, CVE-2026-74746, CVE-2026-74747, CVE-2026-74748,\nCVE-2026-74750, CVE-2026-74752, CVE-2026-74753, CVE-2026-74754,\nCVE-2026-80519, CVE-2026-80520, CVE-2026-80521, CVE-2026-80522,\nCVE-2026-80523, CVE-2026-80524, CVE-2026-80525, CVE-2026-80526,\nCVE-2026-80527, CVE-2026-80528, CVE-2026-80529, CVE-2026-80530,\nCVE-2026-80531, CVE-2026-80532, CVE-2026-80533, CVE-2026-80534,\nCVE-2026-80535, CVE-2026-80536, CVE-2026-80537, CVE-2026-80538,\nCVE-2026-80539, CVE-2026-80540, CVE-2026-80541, CVE-2026-80542,\nCVE-2026-80547, CVE-2026-80548, CVE-2026-80549, CVE-2026-80550,\nCVE-2026-80551, CVE-2026-80552, CVE-2026-80553, CVE-2026-80554,\nCVE-2026-80555, CVE-2026-80556, CVE-2026-80557, CVE-2026-80558,\nCVE-2026-80559, CVE-2026-80560, CVE-2026-80561, CVE-2026-80562,\nCVE-2026-80563, CVE-2026-80564, CVE-2026-80565, CVE-2026-80566,\nCVE-2026-80567, CVE-2026-80568, CVE-2026-80569, CVE-2026-80570,\nCVE-2026-80571, CVE-2026-80572, CVE-2026-80573, CVE-2026-80574,\nCVE-2026-80575, CVE-2026-80576, CVE-2026-80577, CVE-2026-80578,\nCVE-2026-80579, CVE-2026-80580, CVE-2026-80581, CVE-2026-80582,\nCVE-2026-80583, CVE-2026-80584, CVE-2026-80585, CVE-2026-80586,\nCVE-2026-80587, CVE-2026-80588, CVE-2026-80589, CVE-2026-80590,\nCVE-2026-80678, CVE-2026-80679, CVE-2026-80680, CVE-2026-80681,\nCVE-2026-80683, CVE-2026-80684, CVE-2026-80685, CVE-2026-80686,\nCVE-2026-80687, CVE-2026-80688, CVE-2026-80689, CVE-2026-80690,\nCVE-2026-80691, CVE-2026-80692, CVE-2026-80693, CVE-2026-80694,\nCVE-2026-80695, CVE-2026-80696, CVE-2026-80697, CVE-2026-80698,\nCVE-2026-80699, CVE-2026-80700, CVE-2026-80701, CVE-2026-80702,\nCVE-2026-80703, CVE-2026-80704, CVE-2026-80705, CVE-2026-80706,\nCVE-2026-80707, CVE-2026-80708, CVE-2026-80709, CVE-2026-80710,\nCVE-2026-80711, CVE-2026-80712, CVE-2026-80713, CVE-2026-80714,\nCVE-2026-80715, CVE-2026-80716, CVE-2026-80717, CVE-2026-80718,\nCVE-2026-80720, CVE-2026-80721, CVE-2026-80722, CVE-2026-80723,\nCVE-2026-80724, CVE-2026-80727, CVE-2026-80729, CVE-2026-80730,\nCVE-2026-80731, CVE-2026-80732, CVE-2026-80733, CVE-2026-80734,\nCVE-2026-80735, CVE-2026-80736, CVE-2026-80737, CVE-2026-80738,\nCVE-2026-80739, CVE-2026-80740, CVE-2026-80741, CVE-2026-80742,\nCVE-2026-80743, CVE-2026-80744, CVE-2026-80745, CVE-2026-80747,\nCVE-2026-80748, CVE-2026-80749, CVE-2026-80750, CVE-2026-80751,\nCVE-2026-80752, CVE-2026-80753, CVE-2026-80754, CVE-2026-80755,\nCVE-2026-80756, CVE-2026-80757, CVE-2026-80758, CVE-2026-80759,\nCVE-2026-80760, CVE-2026-80761, CVE-2026-80762, CVE-2026-80763,\nCVE-2026-80764, CVE-2026-80765, CVE-2026-80766, CVE-2026-80767,\nCVE-2026-80768, CVE-2026-80769, CVE-2026-80770, CVE-2026-80771,\nCVE-2026-80772, CVE-2026-80774, CVE-2026-80775, CVE-2026-80776,\nCVE-2026-80777, CVE-2026-80778, CVE-2026-80779, CVE-2026-80780,\nCVE-2026-80781, CVE-2026-80782, CVE-2026-80783, CVE-2026-80784,\nCVE-2026-80785, CVE-2026-80786, CVE-2026-80787, CVE-2026-80788,\nCVE-2026-80789, CVE-2026-80790, CVE-2026-80791, CVE-2026-80792,\nCVE-2026-80793, CVE-2026-80794, CVE-2026-80795, CVE-2026-80796,\nCVE-2026-80797, CVE-2026-80798, CVE-2026-80799, CVE-2026-80800,\nCVE-2026-80801, CVE-2026-80802, CVE-2026-80803, CVE-2026-80804,\nCVE-2026-80805, CVE-2026-80806, CVE-2026-80807, CVE-2026-80808,\nCVE-2026-80809, CVE-2026-80810, CVE-2026-80811, CVE-2026-80812,\nCVE-2026-80813, CVE-2026-80814, CVE-2026-80815, CVE-2026-80816,\nCVE-2026-80817, CVE-2026-80818, CVE-2026-80819, CVE-2026-80820,\nCVE-2026-80821, CVE-2026-80822, CVE-2026-80823, CVE-2026-80824,\nCVE-2026-80825, CVE-2026-80826, CVE-2026-80827, CVE-2026-80828,\nCVE-2026-80829, CVE-2026-80830, CVE-2026-80831, CVE-2026-80832,\nCVE-2026-80833, CVE-2026-80834, CVE-2026-80835, CVE-2026-80836,\nCVE-2026-80837, CVE-2026-80838, CVE-2026-80839, CVE-2026-80840,\nCVE-2026-80841, CVE-2026-80842, CVE-2026-80843, CVE-2026-80844,\nCVE-2026-80845, CVE-2026-80846, CVE-2026-80847, CVE-2026-80848,\nCVE-2026-80849, CVE-2026-80850, CVE-2026-80851, CVE-2026-80852,\nCVE-2026-80854, CVE-2026-80855, CVE-2026-80856, CVE-2026-80857,\nCVE-2026-80858, CVE-2026-80859, CVE-2026-80860, CVE-2026-80861,\nCVE-2026-80862, CVE-2026-80863, CVE-2026-80864, CVE-2026-80887,\nCVE-2026-80888, CVE-2026-80889, CVE-2026-80890, CVE-2026-80891,\nCVE-2026-80892, CVE-2026-80893, CVE-2026-80894, CVE-2026-80895,\nCVE-2026-80896, CVE-2026-80897, CVE-2026-80898, CVE-2026-80899,\nCVE-2026-80900, CVE-2026-80901, CVE-2026-80902, CVE-2026-80903,\nCVE-2026-80904, CVE-2026-80905, CVE-2026-80906, CVE-2026-80907,\nCVE-2026-80908, CVE-2026-80909, CVE-2026-80910, CVE-2026-80911,\nCVE-2026-80912, CVE-2026-80913, CVE-2026-80914, CVE-2026-80915,\nCVE-2026-80916, CVE-2026-80917, CVE-2026-80918, CVE-2026-80920,\nCVE-2026-80921, CVE-2026-80922, CVE-2026-80923, CVE-2026-80924,\nCVE-2026-80925, CVE-2026-80926, CVE-2026-80927, CVE-2026-80928,\nCVE-2026-80929, CVE-2026-80930, CVE-2026-80931, CVE-2026-80932,\nCVE-2026-80933, CVE-2026-80934, CVE-2026-80935, CVE-2026-80936,\nCVE-2026-80937, CVE-2026-80938, CVE-2026-80939, CVE-2026-80940,\nCVE-2026-80941, CVE-2026-80942, CVE-2026-80943, CVE-2026-80944,\nCVE-2026-80945, CVE-2026-80946, CVE-2026-80947, CVE-2026-80948,\nCVE-2026-80949, CVE-2026-80950, CVE-2026-80951, CVE-2026-80952,\nCVE-2026-80953, CVE-2026-80954, CVE-2026-80955, CVE-2026-80956,\nCVE-2026-80957, CVE-2026-80958, CVE-2026-80959, CVE-2026-80960,\nCVE-2026-80961, CVE-2026-80962, CVE-2026-80963, CVE-2026-80964,\nCVE-2026-80965, CVE-2026-80966, CVE-2026-80967, CVE-2026-80968,\nCVE-2026-80969, CVE-2026-80970, CVE-2026-80971, CVE-2026-80972,\nCVE-2026-80973, CVE-2026-80974, CVE-2026-80975, CVE-2026-80976,\nCVE-2026-80977, CVE-2026-80978, CVE-2026-80979, CVE-2026-80980,\nCVE-2026-80981, CVE-2026-80982, CVE-2026-80983, CVE-2026-80984,\nCVE-2026-80985, CVE-2026-80986, CVE-2026-80987, CVE-2026-80988,\nCVE-2026-80989, CVE-2026-80990, CVE-2026-80991, CVE-2026-80992,\nCVE-2026-80993, CVE-2026-80994, CVE-2026-80996, CVE-2026-80997,\nCVE-2026-80999, CVE-2026-81000, CVE-2026-81001, CVE-2026-81002,\nCVE-2026-81003, CVE-2026-81004, CVE-2026-81005, CVE-2026-81006,\nCVE-2026-81007, CVE-2026-81008, CVE-2026-81009, CVE-2026-81010,\nCVE-2026-81011, CVE-2026-81012, CVE-2026-81013, CVE-2026-81014,\nCVE-2026-81015, CVE-2026-81016, CVE-2026-81017, CVE-2026-81018,\nCVE-2026-89437, CVE-2026-89438, CVE-2026-89439, CVE-2026-89440,\nCVE-2026-89441, CVE-2026-89442, CVE-2026-89443, CVE-2026-89444,\nCVE-2026-89445, CVE-2026-89446, CVE-2026-89447, CVE-2026-89448,\nCVE-2026-89449, CVE-2026-89450, CVE-2026-89451, CVE-2026-89452,\nCVE-2026-89453, CVE-2026-89454, CVE-2026-89455, CVE-2026-89456,\nCVE-2026-89457, CVE-2026-89458, CVE-2026-89460, CVE-2026-89461,\nCVE-2026-89462, CVE-2026-89463, CVE-2026-89464, CVE-2026-89465,\nCVE-2026-89466, CVE-2026-89467, CVE-2026-89468, CVE-2026-89469,\nCVE-2026-89470, CVE-2026-89471, CVE-2026-89472, CVE-2026-89473,\nCVE-2026-89474, CVE-2026-89475, CVE-2026-89476, CVE-2026-89477,\nCVE-2026-89478, CVE-2026-89479, CVE-2026-89480, CVE-2026-89481,\nCVE-2026-89482, CVE-2026-89483, CVE-2026-89484, CVE-2026-89485,\nCVE-2026-89486, CVE-2026-89487, CVE-2026-89488, CVE-2026-89489,\nCVE-2026-89490, CVE-2026-89491, CVE-2026-89492, CVE-2026-89493,\nCVE-2026-89494, CVE-2026-89495, CVE-2026-89496, CVE-2026-89497,\nCVE-2026-89498, CVE-2026-89500, CVE-2026-89501, CVE-2026-89502,\nCVE-2026-89503, CVE-2026-89504, CVE-2026-89506, CVE-2026-89507,\nCVE-2026-89508, CVE-2026-89509, CVE-2026-89510, CVE-2026-89511,\nCVE-2026-89512, CVE-2026-89513, CVE-2026-89514, CVE-2026-89515,\nCVE-2026-89520, CVE-2026-89521, CVE-2026-89522, CVE-2026-89523,\nCVE-2026-89524, CVE-2026-89525, CVE-2026-89526, CVE-2026-89527,\nCVE-2026-89528, CVE-2026-89529, CVE-2026-89530, CVE-2026-89531,\nCVE-2026-89532, CVE-2026-89533, CVE-2026-89534, CVE-2026-89535,\nCVE-2026-89536, CVE-2026-89537, CVE-2026-89538, CVE-2026-89539,\nCVE-2026-89540, CVE-2026-89541, CVE-2026-89542, CVE-2026-89543,\nCVE-2026-89544, CVE-2026-89545, CVE-2026-89546, CVE-2026-89547,\nCVE-2026-89548, CVE-2026-89549, CVE-2026-89550, CVE-2026-89551,\nCVE-2026-89552, CVE-2026-89553, CVE-2026-89554, CVE-2026-89555,\nCVE-2026-89556, CVE-2026-89557, CVE-2026-89558, CVE-2026-89559,\nCVE-2026-89560, CVE-2026-89561, CVE-2026-89562, CVE-2026-89563,\nCVE-2026-89564, CVE-2026-89565, CVE-2026-89566, CVE-2026-89567,\nCVE-2026-89569, CVE-2026-89570, CVE-2026-89571, CVE-2026-89572,\nCVE-2026-89573, CVE-2026-89574, CVE-2026-89575, CVE-2026-89576,\nCVE-2026-89577, CVE-2026-89578, CVE-2026-89579, CVE-2026-89580,\nCVE-2026-89581, CVE-2026-89582, CVE-2026-89583, CVE-2026-89584,\nCVE-2026-89585, CVE-2026-89586, CVE-2026-89587, CVE-2026-89588,\nCVE-2026-89589, CVE-2026-89590, CVE-2026-89591, CVE-2026-89592,\nCVE-2026-89593, CVE-2026-89594, CVE-2026-89595, CVE-2026-89596,\nCVE-2026-89597, CVE-2026-89598, CVE-2026-89599, CVE-2026-89600,\nCVE-2026-89601, CVE-2026-89602, CVE-2026-89604, CVE-2026-89605,\nCVE-2026-89606, CVE-2026-89607, CVE-2026-89608, CVE-2026-89609,\nCVE-2026-89615, CVE-2026-89616, CVE-2026-89617, CVE-2026-89618,\nCVE-2026-89619, CVE-2026-89620, CVE-2026-89621, CVE-2026-89622,\nCVE-2026-89623, CVE-2026-89624, CVE-2026-89625, CVE-2026-89626,\nCVE-2026-89627, CVE-2026-89628, CVE-2026-89629, CVE-2026-89630,\nCVE-2026-89631, CVE-2026-89632, CVE-2026-89633, CVE-2026-89634,\nCVE-2026-89636, CVE-2026-89637, CVE-2026-89638, CVE-2026-89640,\nCVE-2026-89641, CVE-2026-89642, CVE-2026-89643, CVE-2026-89644,\nCVE-2026-89645, CVE-2026-89646, CVE-2026-89647, CVE-2026-89648,\nCVE-2026-89649, CVE-2026-89650, CVE-2026-89651, CVE-2026-89652,\nCVE-2026-89653, CVE-2026-89654, CVE-2026-89655, CVE-2026-89656,\nCVE-2026-89657, CVE-2026-89658, CVE-2026-89659, CVE-2026-89660,\nCVE-2026-89661, CVE-2026-89662, CVE-2026-89663, CVE-2026-89664,\nCVE-2026-89665, CVE-2026-89666, CVE-2026-89667, CVE-2026-89668,\nCVE-2026-89669, CVE-2026-89670, CVE-2026-89671, CVE-2026-89672,\nCVE-2026-89673, CVE-2026-89674, CVE-2026-89675, CVE-2026-89676,\nCVE-2026-89677, CVE-2026-89678, CVE-2026-89679, CVE-2026-89680,\nCVE-2026-89682, CVE-2026-89683, CVE-2026-89684, CVE-2026-89685,\nCVE-2026-89686, CVE-2026-89687, CVE-2026-89688, CVE-2026-89689,\nCVE-2026-89690, CVE-2026-89691, CVE-2026-89692, CVE-2026-89693,\nCVE-2026-89694, CVE-2026-89695, CVE-2026-89696, CVE-2026-89697,\nCVE-2026-89698, CVE-2026-89699, CVE-2026-89700, CVE-2026-89701,\nCVE-2026-89702, CVE-2026-89703, CVE-2026-89704, CVE-2026-89705,\nCVE-2026-89706, CVE-2026-89707, CVE-2026-89708, CVE-2026-89709,\nCVE-2026-89710, CVE-2026-89711, CVE-2026-89712, CVE-2026-89713,\nCVE-2026-89714, CVE-2026-89715, CVE-2026-89716, CVE-2026-89717,\nCVE-2026-89718, CVE-2026-89719, CVE-2026-89720, CVE-2026-89721,\nCVE-2026-89722, CVE-2026-89723, CVE-2026-89724, CVE-2026-89725,\nCVE-2026-89726, CVE-2026-89727, CVE-2026-89728, CVE-2026-89729,\nCVE-2026-89730, CVE-2026-89731, CVE-2026-89732, CVE-2026-89733,\nCVE-2026-89734, CVE-2026-89735, CVE-2026-89736, CVE-2026-89737,\nCVE-2026-89738, CVE-2026-89739, CVE-2026-89740, CVE-2026-89741,\nCVE-2026-89742, CVE-2026-89743, CVE-2026-89744, CVE-2026-89745,\nCVE-2026-89746, CVE-2026-89747, CVE-2026-89749, CVE-2026-89750,\nCVE-2026-89751, CVE-2026-89752, CVE-2026-89753, CVE-2026-89754,\nCVE-2026-89755, CVE-2026-89756, CVE-2026-89757, CVE-2026-89758,\nCVE-2026-89759, CVE-2026-89761, CVE-2026-89762, CVE-2026-89763,\nCVE-2026-89765, CVE-2026-89766, CVE-2026-89767, CVE-2026-89768,\nCVE-2026-89769, CVE-2026-89771, CVE-2026-89775, CVE-2026-89776,\nCVE-2026-89777, CVE-2026-89778, CVE-2026-89779, CVE-2026-89780,\nCVE-2026-89781, CVE-2026-89782, CVE-2026-89783, CVE-2026-89784,\nCVE-2026-89785, CVE-2026-89786, CVE-2026-89787, CVE-2026-89788,\nCVE-2026-89789, CVE-2026-89790, CVE-2026-89791, CVE-2026-89792,\nCVE-2026-89793, CVE-2026-89794, CVE-2026-89795, CVE-2026-89796,\nCVE-2026-89797, CVE-2026-89798, CVE-2026-89799, CVE-2026-89800,\nCVE-2026-89801, CVE-2026-89802, CVE-2026-89803, CVE-2026-89804,\nCVE-2026-89806, CVE-2026-89807, CVE-2026-89808, CVE-2026-89809,\nCVE-2026-89810, CVE-2026-89811, CVE-2026-89812, CVE-2026-89813,\nCVE-2026-89814, CVE-2026-89815, CVE-2026-89816, CVE-2026-89817,\nCVE-2026-89818, CVE-2026-89819, CVE-2026-89820, CVE-2026-89821,\nCVE-2026-89822, CVE-2026-89823, CVE-2026-89824, CVE-2026-89825,\nCVE-2026-89826, CVE-2026-89827, CVE-2026-89828, CVE-2026-89829,\nCVE-2026-89830, CVE-2026-89831, CVE-2026-89832, CVE-2026-89833,\nCVE-2026-89834, CVE-2026-89835, CVE-2026-89836, CVE-2026-89837,\nCVE-2026-89838, CVE-2026-89839, CVE-2026-89840, CVE-2026-89841,\nCVE-2026-89842, CVE-2026-89843, CVE-2026-89844, CVE-2026-89845,\nCVE-2026-89846, CVE-2026-89847, CVE-2026-89848, CVE-2026-89849,\nCVE-2026-89850, CVE-2026-89851, CVE-2026-89852, CVE-2026-89853,\nCVE-2026-89854, CVE-2026-89855, CVE-2026-89856, CVE-2026-89857,\nCVE-2026-89858, CVE-2026-89859, CVE-2026-89860, CVE-2026-89861,\nCVE-2026-89862, CVE-2026-89863, CVE-2026-89864, CVE-2026-89865,\nCVE-2026-89866, CVE-2026-89867, CVE-2026-89868, CVE-2026-89869,\nCVE-2026-89870, CVE-2026-89871, CVE-2026-89872, CVE-2026-89873,\nCVE-2026-89874, CVE-2026-89875, CVE-2026-89876, CVE-2026-89877,\nCVE-2026-89878, CVE-2026-89879, CVE-2026-89880, CVE-2026-89881,\nCVE-2026-89882, CVE-2026-89883, CVE-2026-89884, CVE-2026-89885,\nCVE-2026-89886, CVE-2026-89887, CVE-2026-89888, CVE-2026-89889,\nCVE-2026-89890, CVE-2026-89891, CVE-2026-89892, CVE-2026-89893,\nCVE-2026-89894, CVE-2026-89895, CVE-2026-89896, CVE-2026-89897,\nCVE-2026-89898, CVE-2026-89899, CVE-2026-89901, CVE-2026-89902,\nCVE-2026-89903, CVE-2026-89904, CVE-2026-89905, CVE-2026-89906,\nCVE-2026-89908, CVE-2026-89909, CVE-2026-89911, CVE-2026-89912,\nCVE-2026-89913, CVE-2026-89914, CVE-2026-89915, CVE-2026-89916,\nCVE-2026-89917, CVE-2026-89918, CVE-2026-89919, CVE-2026-89920,\nCVE-2026-89921, CVE-2026-89922, CVE-2026-89923, CVE-2026-89924,\nCVE-2026-89925, CVE-2026-89926, CVE-2026-89927, CVE-2026-89928,\nCVE-2026-89929, CVE-2026-89930, CVE-2026-89931, CVE-2026-89932,\nCVE-2026-89933, CVE-2026-89934, CVE-2026-89935, CVE-2026-89936,\nCVE-2026-89937, CVE-2026-89938, CVE-2026-89939, CVE-2026-89940,\nCVE-2026-89941, CVE-2026-89942, CVE-2026-89944, CVE-2026-89945,\nCVE-2026-89946, CVE-2026-89947, CVE-2026-89948, CVE-2026-89949,\nCVE-2026-89950, CVE-2026-89951, CVE-2026-89952, CVE-2026-89953,\nCVE-2026-89954, CVE-2026-89955, CVE-2026-89956, CVE-2026-89957,\nCVE-2026-89958, CVE-2026-89959, CVE-2026-89960, CVE-2026-89961,\nCVE-2026-89962, CVE-2026-89963, CVE-2026-89964, CVE-2026-89965,\nCVE-2026-89966, CVE-2026-89967, CVE-2026-89968, CVE-2026-89969,\nCVE-2026-89970, CVE-2026-89971, CVE-2026-89972, CVE-2026-89973,\nCVE-2026-89974, CVE-2026-89975, CVE-2026-89976, CVE-2026-89977,\nCVE-2026-89978, CVE-2026-89979, CVE-2026-89981, CVE-2026-89982,\nCVE-2026-89983, CVE-2026-89984, CVE-2026-89986, CVE-2026-89987,\nCVE-2026-89988, CVE-2026-89989, CVE-2026-89990, CVE-2026-89991,\nCVE-2026-89992, CVE-2026-89993, CVE-2026-89994, CVE-2026-89995,\nCVE-2026-89996, CVE-2026-89997, CVE-2026-89998, CVE-2026-89999,\nCVE-2026-90000, CVE-2026-90001, CVE-2026-90002, CVE-2026-90003,\nCVE-2026-90005, CVE-2026-90006, CVE-2026-90007, CVE-2026-90008,\nCVE-2026-90011, CVE-2026-90012, CVE-2026-90013, CVE-2026-90014,\nCVE-2026-90015, CVE-2026-90016, CVE-2026-90017, CVE-2026-90018,\nCVE-2026-90019, CVE-2026-90020, CVE-2026-90021, CVE-2026-90022,\nCVE-2026-90023, CVE-2026-90024, CVE-2026-90025, CVE-2026-90026,\nCVE-2026-90027, CVE-2026-90028, CVE-2026-90029, CVE-2026-90030,\nCVE-2026-90031, CVE-2026-90032, CVE-2026-90033, CVE-2026-90034,\nCVE-2026-90035, CVE-2026-90036, CVE-2026-90037, CVE-2026-90039,\nCVE-2026-90040, CVE-2026-90041, CVE-2026-90042, CVE-2026-90043,\nCVE-2026-90044, CVE-2026-90045, CVE-2026-90046, CVE-2026-90047,\nCVE-2026-90048, CVE-2026-90049, CVE-2026-90051, CVE-2026-90053,\nCVE-2026-90054, CVE-2026-90055, CVE-2026-90056, CVE-2026-90057,\nCVE-2026-90058, CVE-2026-90059, CVE-2026-90060, CVE-2026-90061,\nCVE-2026-90062, CVE-2026-90063, CVE-2026-90065, CVE-2026-90066,\nCVE-2026-90067, CVE-2026-90068, CVE-2026-90069, CVE-2026-90070,\nCVE-2026-90071, CVE-2026-90072, CVE-2026-90073, CVE-2026-90074,\nCVE-2026-90075, CVE-2026-90076, CVE-2026-90077, CVE-2026-90078,\nCVE-2026-90079, CVE-2026-90080, CVE-2026-90081, CVE-2026-90082,\nCVE-2026-90083, CVE-2026-90084, CVE-2026-90085, CVE-2026-90086,\nCVE-2026-90087, CVE-2026-90088, CVE-2026-90089, CVE-2026-90090,\nCVE-2026-90091, CVE-2026-90092, CVE-2026-90093, CVE-2026-90094,\nCVE-2026-90095, CVE-2026-90097, CVE-2026-90099, CVE-2026-90100,\nCVE-2026-90101, CVE-2026-90102, CVE-2026-90103, CVE-2026-90104,\nCVE-2026-90105, CVE-2026-90106, CVE-2026-90107, CVE-2026-90108,\nCVE-2026-90109, CVE-2026-90110, CVE-2026-90111, CVE-2026-90112,\nCVE-2026-90113, CVE-2026-90114, CVE-2026-90115, CVE-2026-90116,\nCVE-2026-90119, CVE-2026-90120, CVE-2026-90121, CVE-2026-90122,\nCVE-2026-90124, CVE-2026-90125, CVE-2026-90126, CVE-2026-90127,\nCVE-2026-90128, CVE-2026-90129, CVE-2026-90130, CVE-2026-90135,\nCVE-2026-90136, CVE-2026-90137, CVE-2026-90138, CVE-2026-90139,\nCVE-2026-90140, CVE-2026-90141, CVE-2026-90142, CVE-2026-90143,\nCVE-2026-90145, CVE-2026-90146, CVE-2026-90147, CVE-2026-90148,\nCVE-2026-90149, CVE-2026-90150, CVE-2026-90151, CVE-2026-90152,\nCVE-2026-90153, CVE-2026-90154, CVE-2026-90156, CVE-2026-90157,\nCVE-2026-90158, CVE-2026-90159, CVE-2026-90160, CVE-2026-90161,\nCVE-2026-90163, CVE-2026-90164, CVE-2026-90165, CVE-2026-90166,\nCVE-2026-90169, CVE-2026-90170, CVE-2026-90174, CVE-2026-90175,\nCVE-2026-90176, CVE-2026-90177, CVE-2026-90178, CVE-2026-90179,\nCVE-2026-90180, CVE-2026-90182, CVE-2026-90183, CVE-2026-90184,\nCVE-2026-90185, CVE-2026-90186, CVE-2026-90187, CVE-2026-90188,\nCVE-2026-90189, CVE-2026-90190, CVE-2026-90191, CVE-2026-90192,\nCVE-2026-90193, CVE-2026-90194, CVE-2026-90195, CVE-2026-90196,\nCVE-2026-90197, CVE-2026-90198, CVE-2026-90199, CVE-2026-90200,\nCVE-2026-90201, CVE-2026-90202, CVE-2026-90203, CVE-2026-90204,\nCVE-2026-90205, CVE-2026-90206, CVE-2026-90207, CVE-2026-90208,\nCVE-2026-90209, CVE-2026-90211, CVE-2026-90212, CVE-2026-90213,\nCVE-2026-90214, CVE-2026-90215, CVE-2026-90216, CVE-2026-90217,\nCVE-2026-90218, CVE-2026-90219, CVE-2026-90220, CVE-2026-90221,\nCVE-2026-90222, CVE-2026-90223, CVE-2026-90224, CVE-2026-90225,\nCVE-2026-90226, CVE-2026-90227, CVE-2026-90228, CVE-2026-90229,\nCVE-2026-90230, CVE-2026-90231, CVE-2026-90232, CVE-2026-90233,\nCVE-2026-90234, CVE-2026-90235, CVE-2026-90237, CVE-2026-90240,\nCVE-2026-90241, CVE-2026-90242, CVE-2026-90243, CVE-2026-90244,\nCVE-2026-90245, CVE-2026-90246, CVE-2026-90247, CVE-2026-90248,\nCVE-2026-90249, CVE-2026-90250, CVE-2026-90251, CVE-2026-90252,\nCVE-2026-90253, CVE-2026-90254, CVE-2026-90255, CVE-2026-90256,\nCVE-2026-90257, CVE-2026-90258, CVE-2026-90259, CVE-2026-90260,\nCVE-2026-90261, CVE-2026-90262, CVE-2026-90263, CVE-2026-90264,\nCVE-2026-90265, CVE-2026-90267, CVE-2026-90269, CVE-2026-90270,\nCVE-2026-90271, CVE-2026-90272, CVE-2026-90273, CVE-2026-90274,\nCVE-2026-90275, CVE-2026-90276, CVE-2026-90277, CVE-2026-90278,\nCVE-2026-90279, CVE-2026-90280, CVE-2026-90281, CVE-2026-90282,\nCVE-2026-90283, CVE-2026-90284, CVE-2026-90285, CVE-2026-90286,\nCVE-2026-90287, CVE-2026-90288, CVE-2026-90289, CVE-2026-90290,\nCVE-2026-90291, CVE-2026-90292, CVE-2026-90293, CVE-2026-90294,\nCVE-2026-90295, CVE-2026-90296, CVE-2026-90297, CVE-2026-90298,\nCVE-2026-90300, CVE-2026-90301, CVE-2026-90302, CVE-2026-90303,\nCVE-2026-90306, CVE-2026-90307, CVE-2026-90308, CVE-2026-90309,\nCVE-2026-90311, CVE-2026-90312, CVE-2026-90313, CVE-2026-90314,\nCVE-2026-90315, CVE-2026-90316, CVE-2026-90318, CVE-2026-90319,\nCVE-2026-90320, CVE-2026-90321, CVE-2026-90322, CVE-2026-90323,\nCVE-2026-90324, CVE-2026-90325, CVE-2026-90326, CVE-2026-90327,\nCVE-2026-90328, CVE-2026-90329, CVE-2026-90330, CVE-2026-90331,\nCVE-2026-90332, CVE-2026-90333, CVE-2026-90334, CVE-2026-90335,\nCVE-2026-90336, CVE-2026-90337, CVE-2026-90338, CVE-2026-90341,\nCVE-2026-90342, CVE-2026-90343, CVE-2026-90344, CVE-2026-90345,\nCVE-2026-90346, CVE-2026-90347, CVE-2026-90348, CVE-2026-90349,\nCVE-2026-90350, CVE-2026-90351, CVE-2026-90352, CVE-2026-90353,\nCVE-2026-90354, CVE-2026-90355, CVE-2026-90356, CVE-2026-90357,\nCVE-2026-90358, CVE-2026-90359, CVE-2026-90360, CVE-2026-90361,\nCVE-2026-90362, CVE-2026-90363, CVE-2026-90364, CVE-2026-90365,\nCVE-2026-90366, CVE-2026-90367, CVE-2026-90368, CVE-2026-90369,\nCVE-2026-90370, CVE-2026-90371, CVE-2026-90372, CVE-2026-90373,\nCVE-2026-90374, CVE-2026-90375, CVE-2026-90376, CVE-2026-90377,\nCVE-2026-90378, CVE-2026-90379, CVE-2026-90380, CVE-2026-90381,\nCVE-2026-90382, CVE-2026-90383, CVE-2026-90384, CVE-2026-90385,\nCVE-2026-90386, CVE-2026-90387, CVE-2026-90388, CVE-2026-90389,\nCVE-2026-90390, CVE-2026-90391, CVE-2026-90392, CVE-2026-90393,\nCVE-2026-90394, CVE-2026-90395, CVE-2026-90396, CVE-2026-90397,\nCVE-2026-90398, CVE-2026-90399, CVE-2026-90400, CVE-2026-90401,\nCVE-2026-90402, CVE-2026-90403, CVE-2026-90404, CVE-2026-90406,\nCVE-2026-90407, CVE-2026-90408, CVE-2026-90409, CVE-2026-90410,\nCVE-2026-90411, CVE-2026-90412, CVE-2026-90413, CVE-2026-90414,\nCVE-2026-90415, CVE-2026-90416, CVE-2026-90417, CVE-2026-90418,\nCVE-2026-90419, CVE-2026-90420, CVE-2026-90421, CVE-2026-90422,\nCVE-2026-90423, CVE-2026-90424, CVE-2026-90425, CVE-2026-90426,\nCVE-2026-90427, CVE-2026-90428, CVE-2026-90429, CVE-2026-90430,\nCVE-2026-90431, CVE-2026-90433, CVE-2026-90434, CVE-2026-90435,\nCVE-2026-92476, CVE-2026-92477, CVE-2026-92479, CVE-2026-92480,\nCVE-2026-92481, CVE-2026-92482, CVE-2026-92483, CVE-2026-92484,\nCVE-2026-92485, CVE-2026-92486, CVE-2026-92488, CVE-2026-92489,\nCVE-2026-92490, CVE-2026-92491, CVE-2026-92493, CVE-2026-92494,\nCVE-2026-92495, CVE-2026-92496, CVE-2026-92497, CVE-2026-92498,\nCVE-2026-92499, CVE-2026-92500, CVE-2026-92501, CVE-2026-92503,\nCVE-2026-92504, CVE-2026-92505, CVE-2026-92506, CVE-2026-92507,\nCVE-2026-92508, CVE-2026-92509, CVE-2026-92510, CVE-2026-92511,\nCVE-2026-92512, CVE-2026-92513, CVE-2026-92514, CVE-2026-92515,\nCVE-2026-92516, CVE-2026-92517, CVE-2026-92518, CVE-2026-92519,\nCVE-2026-92520, CVE-2026-92521, CVE-2026-92522, CVE-2026-92523,\nCVE-2026-92524, CVE-2026-92525, CVE-2026-93037, CVE-2026-93039,\nCVE-2026-93040, CVE-2026-93041, CVE-2026-93042, CVE-2026-93043,\nCVE-2026-93044, CVE-2026-93045, CVE-2026-93046, CVE-2026-93047,\nCVE-2026-93048, CVE-2026-93049, CVE-2026-93050, CVE-2026-93051,\nCVE-2026-93052, CVE-2026-93053, CVE-2026-93054, CVE-2026-93055,\nCVE-2026-93056, CVE-2026-93058, CVE-2026-93059, CVE-2026-93061,\nCVE-2026-93062, CVE-2026-93063, CVE-2026-93064, CVE-2026-93065,\nCVE-2026-93066, CVE-2026-93067, CVE-2026-93068, CVE-2026-93069,\nCVE-2026-93070, CVE-2026-93071, CVE-2026-93072, CVE-2026-93073,\nCVE-2026-93077, CVE-2026-93078, CVE-2026-93079, CVE-2026-93080,\nCVE-2026-93081, CVE-2026-93082, CVE-2026-93083, CVE-2026-93084,\nCVE-2026-93085, CVE-2026-93086, CVE-2026-93089, CVE-2026-93090,\nCVE-2026-93091, CVE-2026-93092, CVE-2026-93093, CVE-2026-93094,\nCVE-2026-93095, CVE-2026-93096, CVE-2026-93097, CVE-2026-93098,\nCVE-2026-93099, CVE-2026-93100, CVE-2026-93101, CVE-2026-93102,\nCVE-2026-93103, CVE-2026-93104, CVE-2026-93105, CVE-2026-93106,\nCVE-2026-93107, CVE-2026-93108, CVE-2026-93109, CVE-2026-93110,\nCVE-2026-93112, CVE-2026-93113, CVE-2026-93114, CVE-2026-93115,\nCVE-2026-93116, CVE-2026-93117, CVE-2026-93118, CVE-2026-93119,\nCVE-2026-93120, CVE-2026-93121, CVE-2026-93122, CVE-2026-93123,\nCVE-2026-93125, CVE-2026-93126, CVE-2026-93127, CVE-2026-93128,\nCVE-2026-93129, CVE-2026-93130, CVE-2026-93131, CVE-2026-93132,\nCVE-2026-93133, CVE-2026-93134, CVE-2026-93135, CVE-2026-93136,\nCVE-2026-93137, CVE-2026-93138, CVE-2026-93140, CVE-2026-93141,\nCVE-2026-93142, CVE-2026-93143, CVE-2026-93144, CVE-2026-93145,\nCVE-2026-93146, CVE-2026-93148, CVE-2026-93149, CVE-2026-93150,\nCVE-2026-93151, CVE-2026-93152, CVE-2026-93153, CVE-2026-93154,\nCVE-2026-93155, CVE-2026-93156, CVE-2026-93157, CVE-2026-93158,\nCVE-2026-93159, CVE-2026-93160, CVE-2026-93161, CVE-2026-93162,\nCVE-2026-93163, CVE-2026-93164, CVE-2026-93165, CVE-2026-93167,\nCVE-2026-93168, CVE-2026-93169, CVE-2026-93170, CVE-2026-93172,\nCVE-2026-93173, CVE-2026-93174, CVE-2026-93176, CVE-2026-93177,\nCVE-2026-93178, CVE-2026-93179, CVE-2026-93181, CVE-2026-93182,\nCVE-2026-93183, CVE-2026-93184, CVE-2026-93185, CVE-2026-93186,\nCVE-2026-93188, CVE-2026-93189, CVE-2026-93190, CVE-2026-93191,\nCVE-2026-93192, CVE-2026-93193, CVE-2026-93194, CVE-2026-93195,\nCVE-2026-93196, CVE-2026-93198, CVE-2026-93199, CVE-2026-93200,\nCVE-2026-93201, CVE-2026-93202, CVE-2026-93203, CVE-2026-93204,\nCVE-2026-93205, CVE-2026-93206, CVE-2026-93207, CVE-2026-93208,\nCVE-2026-93209, CVE-2026-93210, CVE-2026-93211, CVE-2026-93212,\nCVE-2026-93213, CVE-2026-93214, CVE-2026-93215, CVE-2026-93216,\nCVE-2026-93217, CVE-2026-93218, CVE-2026-93219, CVE-2026-93220,\nCVE-2026-93221, CVE-2026-93222, CVE-2026-93223, CVE-2026-93224,\nCVE-2026-93225, CVE-2026-93226, CVE-2026-93227, CVE-2026-93228,\nCVE-2026-93229, CVE-2026-93230, CVE-2026-93231, CVE-2026-93233,\nCVE-2026-93234, CVE-2026-93235, CVE-2026-93236, CVE-2026-93237,\nCVE-2026-93238, CVE-2026-93239, CVE-2026-93240, CVE-2026-93241,\nCVE-2026-93242, CVE-2026-93243, CVE-2026-93244, CVE-2026-93245,\nCVE-2026-93247, CVE-2026-93248, CVE-2026-93249, CVE-2026-93250,\nCVE-2026-93251, CVE-2026-93252, CVE-2026-93253, CVE-2026-93256,\nCVE-2026-93258, CVE-2026-93259, CVE-2026-93260, CVE-2026-93261,\nCVE-2026-93262, CVE-2026-93264, CVE-2026-93265, CVE-2026-93266,\nCVE-2026-93267, CVE-2026-93268, CVE-2026-93269, CVE-2026-93270,\nCVE-2026-93271, CVE-2026-93272, CVE-2026-93273, CVE-2026-93274,\nCVE-2026-93275, CVE-2026-93276, CVE-2026-93280, CVE-2026-93281,\nCVE-2026-93282, CVE-2026-93283, CVE-2026-93284, CVE-2026-93285,\nCVE-2026-93286, CVE-2026-93287, CVE-2026-93288, CVE-2026-93781,\nCVE-2026-93782, CVE-2026-93783, CVE-2026-93784, CVE-2026-93785,\nCVE-2026-93786, CVE-2026-93787, CVE-2026-93788, CVE-2026-93789,\nCVE-2026-93790, CVE-2026-93791, CVE-2026-93792, CVE-2026-93793,\nCVE-2026-93794, CVE-2026-93795, CVE-2026-93796, CVE-2026-93797,\nCVE-2026-93798, CVE-2026-93799, CVE-2026-93800, CVE-2026-93801,\nCVE-2026-93802, CVE-2026-93803, CVE-2026-93804, CVE-2026-93805,\nCVE-2026-93806, CVE-2026-93807, CVE-2026-93808, CVE-2026-93809,\nCVE-2026-93810, CVE-2026-93811, CVE-2026-93812, CVE-2026-93813,\nCVE-2026-93814, CVE-2026-93815, CVE-2026-93816, CVE-2026-93817,\nCVE-2026-93818, CVE-2026-93819, CVE-2026-93820, CVE-2026-93821,\nCVE-2026-93822, CVE-2026-93823, CVE-2026-93824, CVE-2026-93825,\nCVE-2026-93826, CVE-2026-93827, CVE-2026-93828, CVE-2026-93829,\nCVE-2026-93830, CVE-2026-97407, CVE-2026-97408, CVE-2026-97409,\nCVE-2026-97410, CVE-2026-97411, CVE-2026-97412, CVE-2026-97413,\nCVE-2026-97414, CVE-2026-97415, CVE-2026-97416, CVE-2026-97417,\nCVE-2026-97418, CVE-2026-97419, CVE-2026-97420, CVE-2026-97421,\nCVE-2026-97422, CVE-2026-97423, CVE-2026-97424, CVE-2026-97425,\nCVE-2026-97426, CVE-2026-97427, CVE-2026-97428, CVE-2026-97429,\nCVE-2026-97430, CVE-2026-97431, CVE-2026-97432, CVE-2026-97433,\nCVE-2026-97434, CVE-2026-97435, CVE-2026-97436, CVE-2026-97437,\nCVE-2026-97438, CVE-2026-97439, CVE-2026-97440, CVE-2026-97441,\nCVE-2026-97442, CVE-2026-97443, CVE-2026-97444, CVE-2026-97445,\nCVE-2026-97446, CVE-2026-97447, CVE-2026-97448, CVE-2026-97449,\nCVE-2026-97450, CVE-2026-97451, CVE-2026-97452, CVE-2026-97453,\nCVE-2026-97454, CVE-2026-97455, CVE-2026-97456, CVE-2026-97472,\nCVE-2026-97473, CVE-2026-97474, CVE-2026-97475, CVE-2026-97476,\nCVE-2026-97477, CVE-2026-97478, CVE-2026-97479, CVE-2026-97480,\nCVE-2026-97481, CVE-2026-97482, CVE-2026-97483, CVE-2026-97484,\nCVE-2026-97485, CVE-2026-97486, CVE-2026-97487, CVE-2026-97488,\nCVE-2026-97489, CVE-2026-97490, CVE-2026-97491, CVE-2026-97492,\nCVE-2026-97493, CVE-2026-97494, CVE-2026-97495, CVE-2026-97496,\nCVE-2026-97497, CVE-2026-97498, CVE-2026-97499, CVE-2026-97500,\nCVE-2026-97501, CVE-2026-97502, CVE-2026-97503, CVE-2026-97505,\nCVE-2026-97506, CVE-2026-97507, CVE-2026-97508, CVE-2026-97509,\nCVE-2026-97510, CVE-2026-97511, CVE-2026-97512, CVE-2026-97513,\nCVE-2026-97514, CVE-2026-97515, CVE-2026-97516, CVE-2026-97517,\nCVE-2026-97518, CVE-2026-97519, CVE-2026-97520, CVE-2026-97521,\nCVE-2026-97522, CVE-2026-97523, CVE-2026-97524, CVE-2026-97525,\nCVE-2026-97526, CVE-2026-97527, CVE-2026-97528, CVE-2026-97529,\nCVE-2026-97530, CVE-2026-97531, CVE-2026-97532, CVE-2026-97533,\nCVE-2026-97534, CVE-2026-97535, CVE-2026-97536, CVE-2026-97537,\nCVE-2026-97538, CVE-2026-97539, CVE-2026-97540, CVE-2026-97541,\nCVE-2026-97542, CVE-2026-97543, CVE-2026-97544, CVE-2026-97545,\nCVE-2026-97546, CVE-2026-97547, CVE-2026-97548, CVE-2026-97549,\nCVE-2026-97550, CVE-2026-97551, CVE-2026-97552, CVE-2026-97553,\nCVE-2026-97554, CVE-2026-97555, CVE-2026-97556, CVE-2026-97557,\nCVE-2026-97558, CVE-2026-97559, CVE-2026-97560, CVE-2026-97561,\nCVE-2026-97562, CVE-2026-97563, CVE-2026-97564, CVE-2026-97565,\nCVE-2026-97566, CVE-2026-97567, CVE-2026-97568, CVE-2026-97571,\nCVE-2026-97572, CVE-2026-97573, CVE-2026-97574, CVE-2026-97575,\nCVE-2026-97576, CVE-2026-97577, CVE-2026-97578, CVE-2026-97579,\nCVE-2026-97580, CVE-2026-97581, CVE-2026-97582, CVE-2026-97583,\nCVE-2026-97584, CVE-2026-97585, CVE-2026-97586, CVE-2026-97587,\nCVE-2026-97588, CVE-2026-97589, CVE-2026-97590, CVE-2026-97591,\nCVE-2026-97592, CVE-2026-97593, CVE-2026-97594, CVE-2026-97595,\nCVE-2026-97596, CVE-2026-97597, CVE-2026-97598, CVE-2026-97599,\nCVE-2026-97600, CVE-2026-97601, CVE-2026-97602, CVE-2026-97603,\nCVE-2026-97604, CVE-2026-97605, CVE-2026-97606, CVE-2026-97607,\nCVE-2026-97608, CVE-2026-97609, CVE-2026-97610, CVE-2026-97611,\nCVE-2026-97612, CVE-2026-97613, CVE-2026-97614, CVE-2026-97615,\nCVE-2026-97616, CVE-2026-97617, CVE-2026-97618, CVE-2026-97619,\nCVE-2026-97620, CVE-2026-97621, CVE-2026-97899, CVE-2026-97900,\nCVE-2026-97901, CVE-2026-97902, CVE-2026-97903, CVE-2026-97904,\nCVE-2026-97905, CVE-2026-97906, CVE-2026-97907, CVE-2026-97908,\nCVE-2026-97909, CVE-2026-97910, CVE-2026-97912, CVE-2026-97913,\nCVE-2026-97914, CVE-2026-97915, CVE-2026-97916, CVE-2026-97917,\nCVE-2026-97918, CVE-2026-97919, CVE-2026-97920, CVE-2026-97921,\nCVE-2026-97922, CVE-2026-97923, CVE-2026-97924, CVE-2026-97925,\nCVE-2026-97926, CVE-2026-97927, CVE-2026-97928, CVE-2026-97929,\nCVE-2026-97930, CVE-2026-97931, CVE-2026-97932, CVE-2026-97933,\nCVE-2026-97934, CVE-2026-97935, CVE-2026-97936, CVE-2026-97938,\nCVE-2026-97939, CVE-2026-97940, CVE-2026-97942, CVE-2026-97943,\nCVE-2026-97944, CVE-2026-97945, CVE-2026-97946, CVE-2026-97947,\nCVE-2026-97948, CVE-2026-97950, CVE-2026-97951, CVE-2026-97953,\nCVE-2026-97954, CVE-2026-97955, CVE-2026-97956, CVE-2026-97957,\nCVE-2026-97958, CVE-2026-97959, CVE-2026-97960, CVE-2026-97961,\nCVE-2026-97962, CVE-2026-97963, CVE-2026-97964, CVE-2026-97965,\nCVE-2026-97966, CVE-2026-97967, CVE-2026-97968, CVE-2026-97969,\nCVE-2026-97970, CVE-2026-97971, CVE-2026-97972, CVE-2026-97973,\nCVE-2026-97974, CVE-2026-97975, CVE-2026-97976, CVE-2026-97977,\nCVE-2026-97978, CVE-2026-97979, CVE-2026-97981, CVE-2026-97982,\nCVE-2026-97983, CVE-2026-97984, CVE-2026-97985, CVE-2026-97986,\nCVE-2026-97987, CVE-2026-97988, CVE-2026-97989, CVE-2026-97990,\nCVE-2026-97991, CVE-2026-97992, CVE-2026-97993, CVE-2026-97994,\nCVE-2026-97995, CVE-2026-97996, CVE-2026-97997, CVE-2026-97998,\nCVE-2026-98000, CVE-2026-98001, CVE-2026-98002, CVE-2026-98003,\nCVE-2026-98004, CVE-2026-98005, CVE-2026-98006, CVE-2026-98007,\nCVE-2026-98008, CVE-2026-98009, CVE-2026-98010, CVE-2026-98011,\nCVE-2026-98012, CVE-2026-98013, CVE-2026-98014, CVE-2026-98015,\nCVE-2026-98016, CVE-2026-98017, CVE-2026-98018, CVE-2026-98019,\nCVE-2026-98020, CVE-2026-98021, CVE-2026-98022, CVE-2026-98023,\nCVE-2026-98024, CVE-2026-98025, CVE-2026-98026, CVE-2026-98027,\nCVE-2026-98028, CVE-2026-98029, CVE-2026-98030, CVE-2026-98031,\nCVE-2026-98032, CVE-2026-98033, CVE-2026-98034, CVE-2026-98037,\nCVE-2026-98039, CVE-2026-98041, CVE-2026-98043, CVE-2026-98044,\nCVE-2026-98045, CVE-2026-98046, CVE-2026-98047, CVE-2026-98048,\nCVE-2026-98049, CVE-2026-98050, CVE-2026-98051, CVE-2026-98052,\nCVE-2026-98053, CVE-2026-98054, CVE-2026-98055, CVE-2026-98056,\nCVE-2026-98057, CVE-2026-98058, CVE-2026-98059, CVE-2026-98060,\nCVE-2026-98061, CVE-2026-98062, CVE-2026-98063, CVE-2026-98064,\nCVE-2026-98065, CVE-2026-98066, CVE-2026-98067, CVE-2026-98068,\nCVE-2026-98069, CVE-2026-98070, CVE-2026-98071, CVE-2026-98072,\nCVE-2026-98073, CVE-2026-98074, CVE-2026-98075, CVE-2026-98076,\nCVE-2026-98077, CVE-2026-98078, CVE-2026-98079, CVE-2026-98080,\nCVE-2026-98081, CVE-2026-98082, CVE-2026-98083, CVE-2026-98084,\nCVE-2026-98085, CVE-2026-98086, CVE-2026-98087, CVE-2026-98088,\nCVE-2026-98089, CVE-2026-98090, CVE-2026-98091, CVE-2026-98092,\nCVE-2026-98093, CVE-2026-98094, CVE-2026-98095, CVE-2026-98096,\nCVE-2026-98097, CVE-2026-98098, CVE-2026-98099, CVE-2026-98101,\nCVE-2026-98102, CVE-2026-98103, CVE-2026-98104, CVE-2026-98105,\nCVE-2026-98106, CVE-2026-98107, CVE-2026-98108, CVE-2026-98109,\nCVE-2026-98110, CVE-2026-98111, CVE-2026-98112, CVE-2026-98113,\nCVE-2026-98114, CVE-2026-98115, CVE-2026-98116, CVE-2026-98117,\nCVE-2026-98118, CVE-2026-98119, CVE-2026-98120, CVE-2026-98121,\nCVE-2026-98122, CVE-2026-98123, CVE-2026-98124, CVE-2026-98125,\nCVE-2026-98126, CVE-2026-98127, CVE-2026-98128, CVE-2026-98129,\nCVE-2026-98130, CVE-2026-98131, CVE-2026-98134, CVE-2026-98142,\nCVE-2026-98143, CVE-2026-98146, CVE-2026-98147, CVE-2026-98148,\nCVE-2026-98149, CVE-2026-98150, CVE-2026-98151, CVE-2026-98152,\nCVE-2026-98153, CVE-2026-98154, CVE-2026-98155, CVE-2026-98156,\nCVE-2026-98157, CVE-2026-98158, CVE-2026-98159, CVE-2026-98160,\nCVE-2026-98161, CVE-2026-98162, CVE-2026-98163, CVE-2026-98164,\nCVE-2026-98166, CVE-2026-98167, CVE-2026-98168, CVE-2026-98169,\nCVE-2026-98170, CVE-2026-98171, CVE-2026-98172, CVE-2026-98173,\nCVE-2026-98174, CVE-2026-98175, CVE-2026-98176, CVE-2026-98177,\nCVE-2026-98179, CVE-2026-98180, CVE-2026-98181, CVE-2026-98182,\nCVE-2026-98184, CVE-2026-98185, CVE-2026-98186, CVE-2026-98187,\nCVE-2026-98188, CVE-2026-98189, CVE-2026-98190, CVE-2026-98191,\nCVE-2026-98192, CVE-2026-98193, CVE-2026-98194, CVE-2026-98195,\nCVE-2026-98196, CVE-2026-98197, CVE-2026-98198, CVE-2026-98199,\nCVE-2026-98200, CVE-2026-98201, CVE-2026-98202, CVE-2026-98203,\nCVE-2026-98204, CVE-2026-98205, CVE-2026-98206, CVE-2026-98207,\nCVE-2026-98208, CVE-2026-98209, CVE-2026-98210, CVE-2026-98211,\nCVE-2026-98212, CVE-2026-98213, CVE-2026-98214, CVE-2026-98215,\nCVE-2026-98216, CVE-2026-98217, CVE-2026-98218, CVE-2026-98221,\nCVE-2026-98222, CVE-2026-98223, CVE-2026-98224, CVE-2026-98226,\nCVE-2026-98227, CVE-2026-98228, CVE-2026-98229, CVE-2026-98230,\nCVE-2026-98231, CVE-2026-98232, CVE-2026-98233, CVE-2026-98234,\nCVE-2026-98235, CVE-2026-98236, CVE-2026-98237, CVE-2026-98238,\nCVE-2026-98239, CVE-2026-98240, CVE-2026-98241, CVE-2026-98242,\nCVE-2026-98244, CVE-2026-98245, CVE-2026-98246, CVE-2026-98247,\nCVE-2026-98248, CVE-2026-98249, CVE-2026-98251, CVE-2026-98252,\nCVE-2026-98253, CVE-2026-98254, CVE-2026-98255, CVE-2026-98256,\nCVE-2026-98257, CVE-2026-98258, CVE-2026-98259, CVE-2026-98260,\nCVE-2026-98261, CVE-2026-98262, CVE-2026-98263, CVE-2026-98264,\nCVE-2026-98265, CVE-2026-98266, CVE-2026-98267, CVE-2026-98268,\nCVE-2026-98269, CVE-2026-98270, CVE-2026-98271, CVE-2026-98272,\nCVE-2026-98273, CVE-2026-98274, CVE-2026-98275, CVE-2026-98276,\nCVE-2026-98277, CVE-2026-98278, CVE-2026-98279, CVE-2026-98280,\nCVE-2026-98281, CVE-2026-98282, CVE-2026-98283, CVE-2026-98284,\nCVE-2026-98285, CVE-2026-98286, CVE-2026-98287, CVE-2026-98288,\nCVE-2026-98289, CVE-2026-98290, CVE-2026-98291, CVE-2026-98292,\nCVE-2026-98293, CVE-2026-98294, CVE-2026-98295, CVE-2026-98296,\nCVE-2026-98297, CVE-2026-98298, CVE-2026-98299, CVE-2026-98300,\nCVE-2026-98301, CVE-2026-98302, CVE-2026-98303, CVE-2026-98304,\nCVE-2026-98306, CVE-2026-98307, CVE-2026-98308, CVE-2026-98309,\nCVE-2026-98311, CVE-2026-98312, CVE-2026-98314, CVE-2026-98317,\nCVE-2026-98318, CVE-2026-98319, CVE-2026-98320, CVE-2026-98321,\nCVE-2026-98322, CVE-2026-98323, CVE-2026-98324, CVE-2026-98325,\nCVE-2026-98326, CVE-2026-98327, CVE-2026-98328, CVE-2026-98329,\nCVE-2026-98330, CVE-2026-98331, CVE-2026-98332, CVE-2026-98333,\nCVE-2026-98334, CVE-2026-98335, CVE-2026-98336, CVE-2026-98337,\nCVE-2026-98338, CVE-2026-98339, CVE-2026-98340, CVE-2026-98341,\nCVE-2026-98342, CVE-2026-98343, CVE-2026-98344, CVE-2026-98345,\nCVE-2026-98346, CVE-2026-98347, CVE-2026-98348, CVE-2026-98349,\nCVE-2026-98350, CVE-2026-98351, CVE-2026-98352, CVE-2026-98354,\nCVE-2026-98355, CVE-2026-98356, CVE-2026-98357, CVE-2026-98358,\nCVE-2026-98359, CVE-2026-98360, CVE-2026-98361, CVE-2026-98362,\nCVE-2026-98363, CVE-2026-98364, CVE-2026-98365, CVE-2026-98366,\nCVE-2026-98367, CVE-2026-98368, CVE-2026-98369, CVE-2026-98370,\nCVE-2026-98371, CVE-2026-98372, CVE-2026-98373, CVE-2026-98374,\nCVE-2026-98377, CVE-2026-98378, CVE-2026-98379, CVE-2026-98380,\nCVE-2026-98381, CVE-2026-98382, CVE-2026-98383, CVE-2026-98384,\nCVE-2026-98386, CVE-2026-98387, CVE-2026-98388, CVE-2026-98389,\nCVE-2026-98390, CVE-2026-98391, CVE-2026-98392, CVE-2026-98393,\nCVE-2026-98394, CVE-2026-98398, CVE-2026-98399, CVE-2026-98400,\nCVE-2026-98401, CVE-2026-98402, CVE-2026-98403, CVE-2026-98404,\nCVE-2026-98406, CVE-2026-98407, CVE-2026-98408, CVE-2026-98409,\nCVE-2026-98410, CVE-2026-98411, CVE-2026-98412, CVE-2026-98413,\nCVE-2026-98414, CVE-2026-98415, CVE-2026-98416, CVE-2026-98417,\nCVE-2026-98419, CVE-2026-98421, CVE-2026-98422, CVE-2026-98423,\nCVE-2026-98424, CVE-2026-98425, CVE-2026-98426, CVE-2026-98427,\nCVE-2026-98428, CVE-2026-98429, CVE-2026-98430, CVE-2026-98431,\nCVE-2026-98433, CVE-2026-98434, CVE-2026-98435, CVE-2026-98436,\nCVE-2026-98437, CVE-2026-98439, CVE-2026-98440, CVE-2026-98441,\nCVE-2026-98442, CVE-2026-98443, CVE-2026-98444, CVE-2026-98445,\nCVE-2026-98446, CVE-2026-98447, CVE-2026-98448, CVE-2026-98449,\nCVE-2026-98450, CVE-2026-98451, CVE-2026-98452, CVE-2026-98453,\nCVE-2026-98454, CVE-2026-98455, CVE-2026-98456, CVE-2026-98457,\nCVE-2026-98458, CVE-2026-98459, CVE-2026-98460, CVE-2026-98461,\nCVE-2026-98462, CVE-2026-98463, CVE-2026-98464, CVE-2026-98465,\nCVE-2026-98466, CVE-2026-98467, CVE-2026-98468, CVE-2026-98469,\nCVE-2026-98470, CVE-2026-98471, CVE-2026-98472, CVE-2026-98473,\nCVE-2026-98474, CVE-2026-98475, CVE-2026-98476, CVE-2026-98477,\nCVE-2026-98478, CVE-2026-98479, CVE-2026-98480, CVE-2026-98481,\nCVE-2026-98482, CVE-2026-98483, CVE-2026-98484, CVE-2026-98485,\nCVE-2026-98486, CVE-2026-98487, CVE-2026-98488, CVE-2026-98489,\nCVE-2026-98490, CVE-2026-98491, CVE-2026-98492, CVE-2026-98493,\nCVE-2026-98494, CVE-2026-98495, CVE-2026-98496, CVE-2026-98497,\nCVE-2026-98498, CVE-2026-98499, CVE-2026-98501, CVE-2026-98502,\nCVE-2026-98503, CVE-2026-98504, CVE-2026-98505, CVE-2026-98506,\nCVE-2026-98507, CVE-2026-98508, CVE-2026-98509, CVE-2026-98510,\nCVE-2026-98511, CVE-2026-98512, CVE-2026-98513, CVE-2026-98514,\nCVE-2026-98515, CVE-2026-98516, CVE-2026-98517, CVE-2026-98518,\nCVE-2026-98519, CVE-2026-98521, CVE-2026-98522, CVE-2026-98523,\nCVE-2026-98524, CVE-2026-98525, CVE-2026-98526, CVE-2026-98527,\nCVE-2026-98528, CVE-2026-98529, CVE-2026-98530, CVE-2026-98531,\nCVE-2026-98532, CVE-2026-98533, CVE-2026-98534, CVE-2026-98535,\nCVE-2026-98536, CVE-2026-98537, CVE-2026-98538, CVE-2026-98539,\nCVE-2026-98541, CVE-2026-98542, CVE-2026-98543, CVE-2026-98544,\nCVE-2026-98545, CVE-2026-98546, CVE-2026-98547, CVE-2026-98548,\nCVE-2026-98549, CVE-2026-98550, CVE-2026-98551, CVE-2026-98552,\nCVE-2026-98553, CVE-2026-98554, CVE-2026-98555, CVE-2026-98556,\nCVE-2026-98558, CVE-2026-98559, CVE-2026-98560, CVE-2026-98561,\nCVE-2026-98562, CVE-2026-98563, CVE-2026-98564, CVE-2026-98565,\nCVE-2026-98566, CVE-2026-98567, CVE-2026-98568, CVE-2026-98569,\nCVE-2026-98570, CVE-2026-98571, CVE-2026-98572, CVE-2026-98573,\nCVE-2026-98574, CVE-2026-98575, CVE-2026-98576, CVE-2026-98577,\nCVE-2026-98578, CVE-2026-98579, CVE-2026-98580, CVE-2026-98581,\nCVE-2026-98582, CVE-2026-98583, CVE-2026-98584, CVE-2026-98585,\nCVE-2026-98586, CVE-2026-98588, CVE-2026-98589, CVE-2026-98590,\nCVE-2026-98591, CVE-2026-98592, CVE-2026-98593, CVE-2026-98594,\nCVE-2026-98595, CVE-2026-98596, CVE-2026-98597, CVE-2026-98598,\nCVE-2026-98599, CVE-2026-98601, CVE-2026-98602, CVE-2026-98603,\nCVE-2026-98604, CVE-2026-98605, CVE-2026-98606, CVE-2026-98607,\nCVE-2026-98608, CVE-2026-98609, CVE-2026-98610, CVE-2026-98611,\nCVE-2026-98612, CVE-2026-98613, CVE-2026-98614, CVE-2026-98615,\nCVE-2026-98616, CVE-2026-98617, CVE-2026-98618, CVE-2026-98620,\nCVE-2026-98621, CVE-2026-98622, CVE-2026-98623, CVE-2026-98624,\nCVE-2026-98625, CVE-2026-98626, CVE-2026-98628, CVE-2026-98629,\nCVE-2026-98630, CVE-2026-98631, CVE-2026-98632, CVE-2026-98633,\nCVE-2026-98634, CVE-2026-98635, CVE-2026-98636, CVE-2026-98637,\nCVE-2026-98638, CVE-2026-98639, CVE-2026-98640, CVE-2026-98641,\nCVE-2026-98642, CVE-2026-98643, CVE-2026-98644, CVE-2026-98646,\nCVE-2026-98647, CVE-2026-98648, CVE-2026-98649, CVE-2026-98650,\nCVE-2026-98651, CVE-2026-98652, CVE-2026-98653, CVE-2026-98867,\nCVE-2026-98868, CVE-2026-98871, CVE-2026-98872, CVE-2026-98873,\nCVE-2026-98874, CVE-2026-98875, CVE-2026-98876, CVE-2026-98877,\nCVE-2026-98878, CVE-2026-98879, CVE-2026-98880, CVE-2026-98881,\nCVE-2026-98882, CVE-2026-98883, CVE-2026-98884, CVE-2026-98885,\nCVE-2026-98886, CVE-2026-98887, CVE-2026-98888, CVE-2026-98889,\nCVE-2026-98891, CVE-2026-98892, CVE-2026-98893, CVE-2026-98894,\nCVE-2026-98895, CVE-2026-98896, CVE-2026-98897, CVE-2026-98898,\nCVE-2026-98899, CVE-2026-98900, CVE-2026-98901, CVE-2026-98902,\nCVE-2026-98903, CVE-2026-98904, CVE-2026-98905, CVE-2026-98906,\nCVE-2026-98907, CVE-2026-98908, CVE-2026-98909, CVE-2026-98910,\nCVE-2026-98911, CVE-2026-98912, CVE-2026-98913, CVE-2026-98914,\nCVE-2026-98915, CVE-2026-98916, CVE-2026-98917, CVE-2026-98918,\nCVE-2026-98919, CVE-2026-98921, CVE-2026-98923, CVE-2026-98924,\nCVE-2026-98925, CVE-2026-98926, CVE-2026-98927, CVE-2026-98928,\nCVE-2026-98929, CVE-2026-98930)\n","status":"published","published":"2026-11-03T11:03:44Z","modified":"2026-11-09T12:53:33.925621133Z","updated_at":"2026-11-09T13:25:32.592646Z"},{"id":"USN-8960-1","title":"linux-oem-7.0 vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - USB Gadget drivers;\n  - Memory management;\n  - Multiple devices driver;\n  - ARM64 architecture;\n  - EROFS file system;\n  - Networking core;\n  - eXpress Data Path;\n  - ARM32 architecture;\n  - M68K architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PA-RISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - Intel NPU Driver;\n  - Speakup Console Speech Driver;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Auxiliary display drivers;\n  - Drivers core;\n  - Micron PCIe SSD driver;\n  - Null block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - Bus devices;\n  - AMD CDX bus driver;\n  - Hardware random number generator core;\n  - Character device driver;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Clocksource drivers;\n  - CPU frequency scaling framework;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - DIBS (Direct Internal Buffer Sharing) drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - ARM SCMI message protocol;\n  - ARM SCPI message protocol;\n  - Google firmware drivers;\n  - Qualcomm firmware drivers;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - HSI subsystem;\n  - Microsoft Hyper-V drivers;\n  - Hardware monitoring drivers;\n  - CoreSight HW tracing drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - Input Device (Miscellaneous) drivers;\n  - Input Device (Mouse) drivers;\n  - On-Chip Interconnect management framework;\n  - IOMMU subsystem;\n  - Industry Pack bus drivers;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - MemoryStick subsystem;\n  - Multifunction device drivers;\n  - Analog Devices digital potentiometer driver;\n  - Broadcom VK accelerator driver;\n  - Fastrpc Driver;\n  - Amazon Nitro Secure Module driver;\n  - SGI GRU driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Network drivers;\n  - Ethernet bonding driver;\n  - Mellanox network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - STMicroelectronics network drivers;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - Device tree and open firmware driver;\n  - Operating Performance Points (OPP) driver;\n  - PA-RISC drivers;\n  - PCI subsystem;\n  - Performance monitor drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Chrome hardware platform drivers;\n  - Mellanox platform drivers;\n  - Microsoft Surface platform drivers;\n  - x86 platform drivers;\n  - MediaTek PM domains;\n  - Power sequencing drivers;\n  - Power supply drivers;\n  - Powercap sysfs driver;\n  - PTP clock framework;\n  - PWM drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - MPAM driver;\n  - RPMSG subsystem;\n  - Real Time Clock drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - ASPEED SoC drivers;\n  - Samsung SoC drivers;\n  - SPI subsystem;\n  - small TFT LCD display modules;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - Userspace I/O drivers;\n  - USB DSL drivers;\n  - Cypress C67X00 USB driver;\n  - USB core drivers;\n  - DesignWare USB3 driver;\n  - USB Host Controller drivers;\n  - Mustek MDC800 USB digital camera driver;\n  - Intel La Jolla Cove Adapter USB driver;\n  - Intel USBIO USB I/O expander driver;\n  - USB Serial drivers;\n  - USB Mass Storage drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - W1 Dallas's 1-wire bus driver;\n  - Watchdog drivers;\n  - Xen hypervisor drivers;\n  - 9P distributed file system;\n  - File systems infrastructure;\n  - AFS file system;\n  - BFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - debug file system;\n  - eCrypt file system;\n  - EFI Variable file system;\n  - exFAT file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - FAT file system;\n  - FUSE (File system in Userspace);\n  - GFS2 file system;\n  - HFS+ file system;\n  - HugeTLB file system;\n  - Journaling layer for block devices (JBD2);\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - Overlay file system;\n  - SMB network file system;\n  - SquashFS file system;\n  - Tracing file system;\n  - UBI file system;\n  - UDF file system;\n  - XFS file system;\n  - BPF subsystem;\n  - Tracing infrastructure;\n  - Kernel futex primitives;\n  - Memory Management;\n  - VLANs driver;\n  - IPv4 networking;\n  - io_uring subsystem;\n  - KProbes tracing;\n  - KVM subsystem;\n  - Live Update Orchestrator (LUO);\n  - Netfilter;\n  - Perf events;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Networking subsytem;\n  - Slab allocator;\n  - Sun RPC protocol;\n  - Vector I/O iterator library;\n  - Virtio network driver;\n  - Network traffic control;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IEEE 802.15.4 subsystem;\n  - IP tunnels definitions;\n  - MAC80211 subsystem;\n  - NFC subsystem;\n  - SCTP protocol;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - Kernel init infrastructure;\n  - Audit subsystem;\n  - Control group (cgroup);\n  - Kernel crash support code;\n  - DMA mapping infrastructure;\n  - Kernel exit() syscall;\n  - Kernel fork() syscall;\n  - IRQ subsystem;\n  - KCOV code coverage framework;\n  - Locking primitives;\n  - Kernel module support;\n  - Namespaces infrastructure;\n  - Kernel command line parsing driver;\n  - PID allocator;\n  - printk logging mechanism;\n  - System reboot mechanism;\n  - Timer subsystem;\n  - Workqueue subsystem;\n  - Kernel build system;\n  - Heterogeneous memory management;\n  - UCS-2 string library;\n  - KASAN memory debugging framework;\n  - 802.1Q VLAN protocol;\n  - Appletalk network protocol;\n  - Asynchronous Transfer Mode (ATM) subsystem;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Devlink API;\n  - Distributed Switch Architecture;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IFE protocol;\n  - IUCV driver;\n  - KCM (Kernel Connection Multiplexor) sockets driver;\n  - L2TP protocol;\n  - Logical Link layer;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netlink;\n  - Open vSwitch;\n  - Packet sockets;\n  - Phonet protocol;\n  - PSP security protocol;\n  - Qualcomm IPC Router (QRTR);\n  - RDS protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - X.25 network layer;\n  - XFRM subsystem;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Linux Security Modules (LSM) Framework;\n  - Key management;\n  - Landlock security;\n  - SELinux security module;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Generic PCM loopback sound driver;\n  - Generic sound devices;\n  - HD-audio driver;\n  - ESS ES18xx ALSA driver;\n  - ICE1712/ICE1724 (Envy24) ALSA driver;\n  - Digigram PCXHR ALSA driver;\n  - AMD SoC Alsa drivers;\n  - Cirrus Logic audio codecs;\n  - QCOM ASoC drivers;\n  - Realtek audio codecs;\n  - Texas InstrumentS Audio (ASoC/HDA) drivers;\n  - SoC Audio for Freescale CPUs drivers;\n  - Intel ASoC drivers;\n  - MediaTek ASoC drivers;\n  - Amlogic Meson SoC drivers;\n  - Rockchip ASoC drivers;\n  - SoundWire (SDCA) ASoC drivers;\n  - SoC audio core drivers;\n  - SOF drivers;\n  - Spreadtrum ASoC drivers;\n  - STI ASoC drivers;\n  - Xilinx ASoC drivers;\n  - USB sound devices;\n  - Virtio sound driver;\n(CVE-2026-100070, CVE-2026-100071, CVE-2026-100072, CVE-2026-100073,\nCVE-2026-100074, CVE-2026-100075, CVE-2026-100076, CVE-2026-100077,\nCVE-2026-100078, CVE-2026-100079, CVE-2026-68451, CVE-2026-68452,\nCVE-2026-68453, CVE-2026-74440, CVE-2026-74441, CVE-2026-74442,\nCVE-2026-74443, CVE-2026-74444, CVE-2026-74445, CVE-2026-74446,\nCVE-2026-74447, CVE-2026-74448, CVE-2026-74449, CVE-2026-74450,\nCVE-2026-74451, CVE-2026-74452, CVE-2026-74453, CVE-2026-74454,\nCVE-2026-74455, CVE-2026-74456, CVE-2026-74457, CVE-2026-74458,\nCVE-2026-74459, CVE-2026-74460, CVE-2026-74461, CVE-2026-74462,\nCVE-2026-74463, CVE-2026-74464, CVE-2026-74465, CVE-2026-74466,\nCVE-2026-74467, CVE-2026-74468, CVE-2026-74469, CVE-2026-74470,\nCVE-2026-74471, CVE-2026-74472, CVE-2026-74473, CVE-2026-74474,\nCVE-2026-74475, CVE-2026-74476, CVE-2026-74477, CVE-2026-74478,\nCVE-2026-74479, CVE-2026-74480, CVE-2026-74481, CVE-2026-74482,\nCVE-2026-74483, CVE-2026-74484, CVE-2026-74485, CVE-2026-74486,\nCVE-2026-74487, CVE-2026-74488, CVE-2026-74490, CVE-2026-74491,\nCVE-2026-74492, CVE-2026-74493, CVE-2026-74494, CVE-2026-74495,\nCVE-2026-74496, CVE-2026-74497, CVE-2026-74498, CVE-2026-74499,\nCVE-2026-74500, CVE-2026-74501, CVE-2026-74502, CVE-2026-74503,\nCVE-2026-74504, CVE-2026-74505, CVE-2026-74506, CVE-2026-74507,\nCVE-2026-74508, CVE-2026-74509, CVE-2026-74510, CVE-2026-74512,\nCVE-2026-74513, CVE-2026-74514, CVE-2026-74515, CVE-2026-74516,\nCVE-2026-74517, CVE-2026-74518, CVE-2026-74519, CVE-2026-74520,\nCVE-2026-74521, CVE-2026-74522, CVE-2026-74523, CVE-2026-74524,\nCVE-2026-74525, CVE-2026-74526, CVE-2026-74528, CVE-2026-74529,\nCVE-2026-74530, CVE-2026-74531, CVE-2026-74532, CVE-2026-74533,\nCVE-2026-74534, CVE-2026-74535, CVE-2026-74536, CVE-2026-74537,\nCVE-2026-74538, CVE-2026-74539, CVE-2026-74540, CVE-2026-74541,\nCVE-2026-74542, CVE-2026-74543, CVE-2026-74544, CVE-2026-74545,\nCVE-2026-74546, CVE-2026-74547, CVE-2026-74548, CVE-2026-74549,\nCVE-2026-74550, CVE-2026-74551, CVE-2026-74552, CVE-2026-74553,\nCVE-2026-74554, CVE-2026-74555, CVE-2026-74556, CVE-2026-74557,\nCVE-2026-74558, CVE-2026-74559, CVE-2026-74560, CVE-2026-74561,\nCVE-2026-74562, CVE-2026-74563, CVE-2026-74564, CVE-2026-74565,\nCVE-2026-74566, CVE-2026-74567, CVE-2026-74569, CVE-2026-74571,\nCVE-2026-74572, CVE-2026-74573, CVE-2026-74574, CVE-2026-74576,\nCVE-2026-74577, CVE-2026-74579, CVE-2026-74580, CVE-2026-74581,\nCVE-2026-74582, CVE-2026-74583, CVE-2026-74585, CVE-2026-74586,\nCVE-2026-74587, CVE-2026-74588, CVE-2026-74589, CVE-2026-74590,\nCVE-2026-74591, CVE-2026-74592, CVE-2026-74593, CVE-2026-74594,\nCVE-2026-74595, CVE-2026-74596, CVE-2026-74597, CVE-2026-74598,\nCVE-2026-74599, CVE-2026-74600, CVE-2026-74601, CVE-2026-74602,\nCVE-2026-74603, CVE-2026-74604, CVE-2026-74605, CVE-2026-74606,\nCVE-2026-74607, CVE-2026-74608, CVE-2026-74609, CVE-2026-74610,\nCVE-2026-74611, CVE-2026-74612, CVE-2026-74613, CVE-2026-74614,\nCVE-2026-74615, CVE-2026-74616, CVE-2026-74617, CVE-2026-74618,\nCVE-2026-74619, CVE-2026-74620, CVE-2026-74621, CVE-2026-74622,\nCVE-2026-74623, CVE-2026-74624, CVE-2026-74625, CVE-2026-74626,\nCVE-2026-74627, CVE-2026-74628, CVE-2026-74629, CVE-2026-74630,\nCVE-2026-74631, CVE-2026-74632, CVE-2026-74633, CVE-2026-74634,\nCVE-2026-74635, CVE-2026-74636, CVE-2026-74637, CVE-2026-74638,\nCVE-2026-74639, CVE-2026-74640, CVE-2026-74641, CVE-2026-74643,\nCVE-2026-74644, CVE-2026-74645, CVE-2026-74646, CVE-2026-74647,\nCVE-2026-74648, CVE-2026-74649, CVE-2026-74650, CVE-2026-74651,\nCVE-2026-74652, CVE-2026-74653, CVE-2026-74654, CVE-2026-74655,\nCVE-2026-74656, CVE-2026-74657, CVE-2026-74658, CVE-2026-74659,\nCVE-2026-74660, CVE-2026-74661, CVE-2026-74662, CVE-2026-74663,\nCVE-2026-74664, CVE-2026-74665, CVE-2026-74666, CVE-2026-74667,\nCVE-2026-74668, CVE-2026-74669, CVE-2026-74670, CVE-2026-74671,\nCVE-2026-74672, CVE-2026-74673, CVE-2026-74674, CVE-2026-74675,\nCVE-2026-74676, CVE-2026-74677, CVE-2026-74678, CVE-2026-74679,\nCVE-2026-74680, CVE-2026-74681, CVE-2026-74682, CVE-2026-74683,\nCVE-2026-74684, CVE-2026-74685, CVE-2026-74686, CVE-2026-74687,\nCVE-2026-74688, CVE-2026-74689, CVE-2026-74690, CVE-2026-74691,\nCVE-2026-74692, CVE-2026-74693, CVE-2026-74694, CVE-2026-74695,\nCVE-2026-74696, CVE-2026-74697, CVE-2026-74698, CVE-2026-74699,\nCVE-2026-74700, CVE-2026-74701, CVE-2026-74702, CVE-2026-74703,\nCVE-2026-74704, CVE-2026-74705, CVE-2026-74706, CVE-2026-74707,\nCVE-2026-74708, CVE-2026-74709, CVE-2026-74710, CVE-2026-74711,\nCVE-2026-74712, CVE-2026-74713, CVE-2026-74714, CVE-2026-74715,\nCVE-2026-74716, CVE-2026-74717, CVE-2026-74718, CVE-2026-74719,\nCVE-2026-74720, CVE-2026-74721, CVE-2026-74722, CVE-2026-74723,\nCVE-2026-74724, CVE-2026-74725, CVE-2026-74726, CVE-2026-74727,\nCVE-2026-74728, CVE-2026-74729, CVE-2026-74730, CVE-2026-74733,\nCVE-2026-74734, CVE-2026-74735, CVE-2026-74736, CVE-2026-74737,\nCVE-2026-74738, CVE-2026-74739, CVE-2026-74740, CVE-2026-74741,\nCVE-2026-74742, CVE-2026-74743, CVE-2026-74744, CVE-2026-74745,\nCVE-2026-74746, CVE-2026-74747, CVE-2026-74748, CVE-2026-74750,\nCVE-2026-74752, CVE-2026-74753, CVE-2026-74754, CVE-2026-80519,\nCVE-2026-80520, CVE-2026-80521, CVE-2026-80522, CVE-2026-80523,\nCVE-2026-80524, CVE-2026-80525, CVE-2026-80526, CVE-2026-80527,\nCVE-2026-80528, CVE-2026-80529, CVE-2026-80530, CVE-2026-80531,\nCVE-2026-80532, CVE-2026-80533, CVE-2026-80534, CVE-2026-80535,\nCVE-2026-80536, CVE-2026-80537, CVE-2026-80538, CVE-2026-80539,\nCVE-2026-80540, CVE-2026-80541, CVE-2026-80542, CVE-2026-80547,\nCVE-2026-80548, CVE-2026-80549, CVE-2026-80550, CVE-2026-80551,\nCVE-2026-80552, CVE-2026-80553, CVE-2026-80554, CVE-2026-80555,\nCVE-2026-80556, CVE-2026-80557, CVE-2026-80558, CVE-2026-80559,\nCVE-2026-80560, CVE-2026-80561, CVE-2026-80562, CVE-2026-80563,\nCVE-2026-80564, CVE-2026-80565, CVE-2026-80566, CVE-2026-80567,\nCVE-2026-80568, CVE-2026-80569, CVE-2026-80570, CVE-2026-80571,\nCVE-2026-80572, CVE-2026-80573, CVE-2026-80574, CVE-2026-80575,\nCVE-2026-80576, CVE-2026-80577, CVE-2026-80578, CVE-2026-80579,\nCVE-2026-80580, CVE-2026-80581, CVE-2026-80582, CVE-2026-80583,\nCVE-2026-80584, CVE-2026-80585, CVE-2026-80586, CVE-2026-80587,\nCVE-2026-80588, CVE-2026-80589, CVE-2026-80590, CVE-2026-80678,\nCVE-2026-80679, CVE-2026-80680, CVE-2026-80681, CVE-2026-80683,\nCVE-2026-80684, CVE-2026-80685, CVE-2026-80686, CVE-2026-80687,\nCVE-2026-80688, CVE-2026-80689, CVE-2026-80690, CVE-2026-80691,\nCVE-2026-80692, CVE-2026-80693, CVE-2026-80694, CVE-2026-80695,\nCVE-2026-80696, CVE-2026-80697, CVE-2026-80698, CVE-2026-80699,\nCVE-2026-80700, CVE-2026-80701, CVE-2026-80702, CVE-2026-80703,\nCVE-2026-80704, CVE-2026-80705, CVE-2026-80706, CVE-2026-80707,\nCVE-2026-80708, CVE-2026-80709, CVE-2026-80710, CVE-2026-80711,\nCVE-2026-80712, CVE-2026-80713, CVE-2026-80714, CVE-2026-80715,\nCVE-2026-80716, CVE-2026-80717, CVE-2026-80718, CVE-2026-80720,\nCVE-2026-80721, CVE-2026-80722, CVE-2026-80723, CVE-2026-80724,\nCVE-2026-80727, CVE-2026-80729, CVE-2026-80730, CVE-2026-80731,\nCVE-2026-80732, CVE-2026-80733, CVE-2026-80734, CVE-2026-80735,\nCVE-2026-80736, CVE-2026-80737, CVE-2026-80738, CVE-2026-80739,\nCVE-2026-80740, CVE-2026-80741, CVE-2026-80742, CVE-2026-80743,\nCVE-2026-80744, CVE-2026-80745, CVE-2026-80747, CVE-2026-80748,\nCVE-2026-80749, CVE-2026-80750, CVE-2026-80751, CVE-2026-80752,\nCVE-2026-80753, CVE-2026-80754, CVE-2026-80755, CVE-2026-80756,\nCVE-2026-80757, CVE-2026-80758, CVE-2026-80759, CVE-2026-80760,\nCVE-2026-80761, CVE-2026-80762, CVE-2026-80763, CVE-2026-80764,\nCVE-2026-80765, CVE-2026-80766, CVE-2026-80767, CVE-2026-80768,\nCVE-2026-80769, CVE-2026-80770, CVE-2026-80771, CVE-2026-80772,\nCVE-2026-80774, CVE-2026-80775, CVE-2026-80776, CVE-2026-80777,\nCVE-2026-80778, CVE-2026-80779, CVE-2026-80780, CVE-2026-80781,\nCVE-2026-80782, CVE-2026-80783, CVE-2026-80784, CVE-2026-80785,\nCVE-2026-80786, CVE-2026-80787, CVE-2026-80788, CVE-2026-80789,\nCVE-2026-80790, CVE-2026-80791, CVE-2026-80792, CVE-2026-80793,\nCVE-2026-80794, CVE-2026-80795, CVE-2026-80796, CVE-2026-80797,\nCVE-2026-80798, CVE-2026-80799, CVE-2026-80800, CVE-2026-80801,\nCVE-2026-80802, CVE-2026-80803, CVE-2026-80804, CVE-2026-80805,\nCVE-2026-80806, CVE-2026-80807, CVE-2026-80808, CVE-2026-80809,\nCVE-2026-80810, CVE-2026-80811, CVE-2026-80812, CVE-2026-80813,\nCVE-2026-80814, CVE-2026-80815, CVE-2026-80816, CVE-2026-80817,\nCVE-2026-80818, CVE-2026-80819, CVE-2026-80820, CVE-2026-80821,\nCVE-2026-80822, CVE-2026-80823, CVE-2026-80824, CVE-2026-80825,\nCVE-2026-80826, CVE-2026-80827, CVE-2026-80828, CVE-2026-80829,\nCVE-2026-80830, CVE-2026-80831, CVE-2026-80832, CVE-2026-80833,\nCVE-2026-80834, CVE-2026-80835, CVE-2026-80836, CVE-2026-80837,\nCVE-2026-80838, CVE-2026-80839, CVE-2026-80840, CVE-2026-80841,\nCVE-2026-80842, CVE-2026-80843, CVE-2026-80844, CVE-2026-80845,\nCVE-2026-80846, CVE-2026-80847, CVE-2026-80848, CVE-2026-80849,\nCVE-2026-80850, CVE-2026-80851, CVE-2026-80852, CVE-2026-80854,\nCVE-2026-80855, CVE-2026-80856, CVE-2026-80857, CVE-2026-80858,\nCVE-2026-80859, CVE-2026-80860, CVE-2026-80861, CVE-2026-80862,\nCVE-2026-80863, CVE-2026-80864, CVE-2026-80887, CVE-2026-80888,\nCVE-2026-80889, CVE-2026-80890, CVE-2026-80891, CVE-2026-80892,\nCVE-2026-80893, CVE-2026-80894, CVE-2026-80895, CVE-2026-80896,\nCVE-2026-80897, CVE-2026-80898, CVE-2026-80899, CVE-2026-80900,\nCVE-2026-80901, CVE-2026-80902, CVE-2026-80903, CVE-2026-80904,\nCVE-2026-80905, CVE-2026-80906, CVE-2026-80907, CVE-2026-80908,\nCVE-2026-80909, CVE-2026-80910, CVE-2026-80911, CVE-2026-80912,\nCVE-2026-80913, CVE-2026-80914, CVE-2026-80915, CVE-2026-80916,\nCVE-2026-80917, CVE-2026-80918, CVE-2026-80920, CVE-2026-80921,\nCVE-2026-80922, CVE-2026-80923, CVE-2026-80924, CVE-2026-80925,\nCVE-2026-80926, CVE-2026-80927, CVE-2026-80928, CVE-2026-80929,\nCVE-2026-80930, CVE-2026-80931, CVE-2026-80932, CVE-2026-80933,\nCVE-2026-80934, CVE-2026-80935, CVE-2026-80936, CVE-2026-80937,\nCVE-2026-80938, CVE-2026-80939, CVE-2026-80940, CVE-2026-80941,\nCVE-2026-80942, CVE-2026-80943, CVE-2026-80944, CVE-2026-80945,\nCVE-2026-80946, CVE-2026-80947, CVE-2026-80948, CVE-2026-80949,\nCVE-2026-80950, CVE-2026-80951, CVE-2026-80952, CVE-2026-80953,\nCVE-2026-80954, CVE-2026-80955, CVE-2026-80956, CVE-2026-80957,\nCVE-2026-80958, CVE-2026-80959, CVE-2026-80960, CVE-2026-80961,\nCVE-2026-80962, CVE-2026-80963, CVE-2026-80964, CVE-2026-80965,\nCVE-2026-80966, CVE-2026-80967, CVE-2026-80968, CVE-2026-80969,\nCVE-2026-80970, CVE-2026-80971, CVE-2026-80972, CVE-2026-80973,\nCVE-2026-80974, CVE-2026-80975, CVE-2026-80976, CVE-2026-80977,\nCVE-2026-80978, CVE-2026-80979, CVE-2026-80980, CVE-2026-80981,\nCVE-2026-80982, CVE-2026-80983, CVE-2026-80984, CVE-2026-80985,\nCVE-2026-80986, CVE-2026-80987, CVE-2026-80988, CVE-2026-80989,\nCVE-2026-80990, CVE-2026-80991, CVE-2026-80992, CVE-2026-80993,\nCVE-2026-80994, CVE-2026-80996, CVE-2026-80997, CVE-2026-80999,\nCVE-2026-81000, CVE-2026-81001, CVE-2026-81002, CVE-2026-81003,\nCVE-2026-81004, CVE-2026-81005, CVE-2026-81006, CVE-2026-81007,\nCVE-2026-81008, CVE-2026-81009, CVE-2026-81010, CVE-2026-81011,\nCVE-2026-81012, CVE-2026-81013, CVE-2026-81014, CVE-2026-81015,\nCVE-2026-81016, CVE-2026-81017, CVE-2026-81018, CVE-2026-89437,\nCVE-2026-89438, CVE-2026-89439, CVE-2026-89440, CVE-2026-89441,\nCVE-2026-89442, CVE-2026-89443, CVE-2026-89444, CVE-2026-89445,\nCVE-2026-89446, CVE-2026-89447, CVE-2026-89448, CVE-2026-89449,\nCVE-2026-89450, CVE-2026-89451, CVE-2026-89452, CVE-2026-89453,\nCVE-2026-89454, CVE-2026-89455, CVE-2026-89456, CVE-2026-89457,\nCVE-2026-89458, CVE-2026-89460, CVE-2026-89461, CVE-2026-89462,\nCVE-2026-89463, CVE-2026-89464, CVE-2026-89465, CVE-2026-89466,\nCVE-2026-89467, CVE-2026-89468, CVE-2026-89469, CVE-2026-89470,\nCVE-2026-89471, CVE-2026-89472, CVE-2026-89473, CVE-2026-89474,\nCVE-2026-89475, CVE-2026-89476, CVE-2026-89477, CVE-2026-89478,\nCVE-2026-89479, CVE-2026-89480, CVE-2026-89481, CVE-2026-89482,\nCVE-2026-89483, CVE-2026-89484, CVE-2026-89485, CVE-2026-89486,\nCVE-2026-89487, CVE-2026-89488, CVE-2026-89489, CVE-2026-89490,\nCVE-2026-89491, CVE-2026-89492, CVE-2026-89493, CVE-2026-89494,\nCVE-2026-89495, CVE-2026-89496, CVE-2026-89497, CVE-2026-89498,\nCVE-2026-89500, CVE-2026-89501, CVE-2026-89502, CVE-2026-89503,\nCVE-2026-89504, CVE-2026-89506, CVE-2026-89507, CVE-2026-89508,\nCVE-2026-89509, CVE-2026-89510, CVE-2026-89511, CVE-2026-89512,\nCVE-2026-89513, CVE-2026-89514, CVE-2026-89515, CVE-2026-89520,\nCVE-2026-89521, CVE-2026-89522, CVE-2026-89523, CVE-2026-89524,\nCVE-2026-89525, CVE-2026-89526, CVE-2026-89527, CVE-2026-89528,\nCVE-2026-89529, CVE-2026-89530, CVE-2026-89531, CVE-2026-89532,\nCVE-2026-89533, CVE-2026-89534, CVE-2026-89535, CVE-2026-89536,\nCVE-2026-89537, CVE-2026-89538, CVE-2026-89539, CVE-2026-89540,\nCVE-2026-89541, CVE-2026-89542, CVE-2026-89543, CVE-2026-89544,\nCVE-2026-89545, CVE-2026-89546, CVE-2026-89547, CVE-2026-89548,\nCVE-2026-89549, CVE-2026-89550, CVE-2026-89551, CVE-2026-89552,\nCVE-2026-89553, CVE-2026-89554, CVE-2026-89555, CVE-2026-89556,\nCVE-2026-89557, CVE-2026-89558, CVE-2026-89559, CVE-2026-89560,\nCVE-2026-89561, CVE-2026-89562, CVE-2026-89563, CVE-2026-89564,\nCVE-2026-89565, CVE-2026-89566, CVE-2026-89567, CVE-2026-89569,\nCVE-2026-89570, CVE-2026-89571, CVE-2026-89572, CVE-2026-89573,\nCVE-2026-89574, CVE-2026-89575, CVE-2026-89576, CVE-2026-89577,\nCVE-2026-89578, CVE-2026-89579, CVE-2026-89580, CVE-2026-89581,\nCVE-2026-89582, CVE-2026-89583, CVE-2026-89584, CVE-2026-89585,\nCVE-2026-89586, CVE-2026-89587, CVE-2026-89588, CVE-2026-89589,\nCVE-2026-89590, CVE-2026-89591, CVE-2026-89592, CVE-2026-89593,\nCVE-2026-89594, CVE-2026-89595, CVE-2026-89596, CVE-2026-89597,\nCVE-2026-89598, CVE-2026-89599, CVE-2026-89600, CVE-2026-89601,\nCVE-2026-89602, CVE-2026-89604, CVE-2026-89605, CVE-2026-89606,\nCVE-2026-89607, CVE-2026-89608, CVE-2026-89609, CVE-2026-89615,\nCVE-2026-89616, CVE-2026-89617, CVE-2026-89618, CVE-2026-89619,\nCVE-2026-89620, CVE-2026-89621, CVE-2026-89622, CVE-2026-89623,\nCVE-2026-89624, CVE-2026-89625, CVE-2026-89626, CVE-2026-89627,\nCVE-2026-89628, CVE-2026-89629, CVE-2026-89630, CVE-2026-89631,\nCVE-2026-89632, CVE-2026-89633, CVE-2026-89634, CVE-2026-89636,\nCVE-2026-89637, CVE-2026-89638, CVE-2026-89640, CVE-2026-89641,\nCVE-2026-89642, CVE-2026-89643, CVE-2026-89644, CVE-2026-89645,\nCVE-2026-89646, CVE-2026-89647, CVE-2026-89648, CVE-2026-89649,\nCVE-2026-89650, CVE-2026-89651, CVE-2026-89652, CVE-2026-89653,\nCVE-2026-89654, CVE-2026-89655, CVE-2026-89656, CVE-2026-89657,\nCVE-2026-89658, CVE-2026-89659, CVE-2026-89660, CVE-2026-89661,\nCVE-2026-89662, CVE-2026-89663, CVE-2026-89664, CVE-2026-89665,\nCVE-2026-89666, CVE-2026-89667, CVE-2026-89668, CVE-2026-89669,\nCVE-2026-89670, CVE-2026-89671, CVE-2026-89672, CVE-2026-89673,\nCVE-2026-89674, CVE-2026-89675, CVE-2026-89676, CVE-2026-89677,\nCVE-2026-89678, CVE-2026-89679, CVE-2026-89680, CVE-2026-89682,\nCVE-2026-89683, CVE-2026-89684, CVE-2026-89685, CVE-2026-89686,\nCVE-2026-89687, CVE-2026-89688, CVE-2026-89689, CVE-2026-89690,\nCVE-2026-89691, CVE-2026-89692, CVE-2026-89693, CVE-2026-89694,\nCVE-2026-89695, CVE-2026-89696, CVE-2026-89697, CVE-2026-89698,\nCVE-2026-89699, CVE-2026-89700, CVE-2026-89701, CVE-2026-89702,\nCVE-2026-89703, CVE-2026-89704, CVE-2026-89705, CVE-2026-89706,\nCVE-2026-89707, CVE-2026-89708, CVE-2026-89709, CVE-2026-89710,\nCVE-2026-89711, CVE-2026-89712, CVE-2026-89713, CVE-2026-89714,\nCVE-2026-89715, CVE-2026-89716, CVE-2026-89717, CVE-2026-89718,\nCVE-2026-89719, CVE-2026-89720, CVE-2026-89721, CVE-2026-89722,\nCVE-2026-89723, CVE-2026-89724, CVE-2026-89725, CVE-2026-89726,\nCVE-2026-89727, CVE-2026-89728, CVE-2026-89729, CVE-2026-89730,\nCVE-2026-89731, CVE-2026-89732, CVE-2026-89733, CVE-2026-89734,\nCVE-2026-89735, CVE-2026-89736, CVE-2026-89737, CVE-2026-89738,\nCVE-2026-89739, CVE-2026-89740, CVE-2026-89741, CVE-2026-89742,\nCVE-2026-89743, CVE-2026-89744, CVE-2026-89745, CVE-2026-89746,\nCVE-2026-89747, CVE-2026-89749, CVE-2026-89750, CVE-2026-89751,\nCVE-2026-89752, CVE-2026-89753, CVE-2026-89754, CVE-2026-89755,\nCVE-2026-89756, CVE-2026-89757, CVE-2026-89758, CVE-2026-89759,\nCVE-2026-89761, CVE-2026-89762, CVE-2026-89763, CVE-2026-89765,\nCVE-2026-89766, CVE-2026-89767, CVE-2026-89768, CVE-2026-89769,\nCVE-2026-89771, CVE-2026-89775, CVE-2026-89776, CVE-2026-89777,\nCVE-2026-89778, CVE-2026-89779, CVE-2026-89780, CVE-2026-89781,\nCVE-2026-89782, CVE-2026-89783, CVE-2026-89784, CVE-2026-89785,\nCVE-2026-89786, CVE-2026-89787, CVE-2026-89788, CVE-2026-89789,\nCVE-2026-89790, CVE-2026-89791, CVE-2026-89792, CVE-2026-89793,\nCVE-2026-89794, CVE-2026-89795, CVE-2026-89796, CVE-2026-89797,\nCVE-2026-89798, CVE-2026-89799, CVE-2026-89800, CVE-2026-89801,\nCVE-2026-89802, CVE-2026-89803, CVE-2026-89804, CVE-2026-89806,\nCVE-2026-89807, CVE-2026-89808, CVE-2026-89809, CVE-2026-89810,\nCVE-2026-89811, CVE-2026-89812, CVE-2026-89813, CVE-2026-89814,\nCVE-2026-89815, CVE-2026-89816, CVE-2026-89817, CVE-2026-89818,\nCVE-2026-89819, CVE-2026-89820, CVE-2026-89821, CVE-2026-89822,\nCVE-2026-89823, CVE-2026-89824, CVE-2026-89825, CVE-2026-89826,\nCVE-2026-89827, CVE-2026-89828, CVE-2026-89829, CVE-2026-89830,\nCVE-2026-89831, CVE-2026-89832, CVE-2026-89833, CVE-2026-89834,\nCVE-2026-89835, CVE-2026-89836, CVE-2026-89837, CVE-2026-89838,\nCVE-2026-89839, CVE-2026-89840, CVE-2026-89841, CVE-2026-89842,\nCVE-2026-89843, CVE-2026-89844, CVE-2026-89845, CVE-2026-89846,\nCVE-2026-89847, CVE-2026-89848, CVE-2026-89849, CVE-2026-89850,\nCVE-2026-89851, CVE-2026-89852, CVE-2026-89853, CVE-2026-89854,\nCVE-2026-89855, CVE-2026-89856, CVE-2026-89857, CVE-2026-89858,\nCVE-2026-89859, CVE-2026-89860, CVE-2026-89861, CVE-2026-89862,\nCVE-2026-89863, CVE-2026-89864, CVE-2026-89865, CVE-2026-89866,\nCVE-2026-89867, CVE-2026-89868, CVE-2026-89869, CVE-2026-89870,\nCVE-2026-89871, CVE-2026-89872, CVE-2026-89873, CVE-2026-89874,\nCVE-2026-89875, CVE-2026-89876, CVE-2026-89877, CVE-2026-89878,\nCVE-2026-89879, CVE-2026-89880, CVE-2026-89881, CVE-2026-89882,\nCVE-2026-89883, CVE-2026-89884, CVE-2026-89885, CVE-2026-89886,\nCVE-2026-89887, CVE-2026-89888, CVE-2026-89889, CVE-2026-89890,\nCVE-2026-89891, CVE-2026-89892, CVE-2026-89893, CVE-2026-89894,\nCVE-2026-89895, CVE-2026-89896, CVE-2026-89897, CVE-2026-89898,\nCVE-2026-89899, CVE-2026-89901, CVE-2026-89902, CVE-2026-89903,\nCVE-2026-89904, CVE-2026-89905, CVE-2026-89906, CVE-2026-89908,\nCVE-2026-89909, CVE-2026-89911, CVE-2026-89912, CVE-2026-89913,\nCVE-2026-89914, CVE-2026-89915, CVE-2026-89916, CVE-2026-89917,\nCVE-2026-89918, CVE-2026-89919, CVE-2026-89920, CVE-2026-89921,\nCVE-2026-89922, CVE-2026-89923, CVE-2026-89924, CVE-2026-89925,\nCVE-2026-89926, CVE-2026-89927, CVE-2026-89928, CVE-2026-89929,\nCVE-2026-89930, CVE-2026-89931, CVE-2026-89932, CVE-2026-89933,\nCVE-2026-89934, CVE-2026-89935, CVE-2026-89936, CVE-2026-89937,\nCVE-2026-89938, CVE-2026-89939, CVE-2026-89940, CVE-2026-89941,\nCVE-2026-89942, CVE-2026-89944, CVE-2026-89945, CVE-2026-89946,\nCVE-2026-89947, CVE-2026-89948, CVE-2026-89949, CVE-2026-89950,\nCVE-2026-89951, CVE-2026-89952, CVE-2026-89953, CVE-2026-89954,\nCVE-2026-89955, CVE-2026-89956, CVE-2026-89957, CVE-2026-89958,\nCVE-2026-89959, CVE-2026-89960, CVE-2026-89961, CVE-2026-89962,\nCVE-2026-89963, CVE-2026-89964, CVE-2026-89965, CVE-2026-89966,\nCVE-2026-89967, CVE-2026-89968, CVE-2026-89969, CVE-2026-89970,\nCVE-2026-89971, CVE-2026-89972, CVE-2026-89973, CVE-2026-89974,\nCVE-2026-89975, CVE-2026-89976, CVE-2026-89977, CVE-2026-89978,\nCVE-2026-89979, CVE-2026-89981, CVE-2026-89982, CVE-2026-89983,\nCVE-2026-89984, CVE-2026-89986, CVE-2026-89987, CVE-2026-89988,\nCVE-2026-89989, CVE-2026-89990, CVE-2026-89991, CVE-2026-89992,\nCVE-2026-89993, CVE-2026-89994, CVE-2026-89995, CVE-2026-89996,\nCVE-2026-89997, CVE-2026-89998, CVE-2026-89999, CVE-2026-90000,\nCVE-2026-90001, CVE-2026-90002, CVE-2026-90003, CVE-2026-90005,\nCVE-2026-90006, CVE-2026-90007, CVE-2026-90008, CVE-2026-90011,\nCVE-2026-90012, CVE-2026-90013, CVE-2026-90014, CVE-2026-90015,\nCVE-2026-90016, CVE-2026-90017, CVE-2026-90018, CVE-2026-90019,\nCVE-2026-90020, CVE-2026-90021, CVE-2026-90022, CVE-2026-90023,\nCVE-2026-90024, CVE-2026-90025, CVE-2026-90026, CVE-2026-90027,\nCVE-2026-90028, CVE-2026-90029, CVE-2026-90030, CVE-2026-90031,\nCVE-2026-90032, CVE-2026-90033, CVE-2026-90034, CVE-2026-90035,\nCVE-2026-90036, CVE-2026-90037, CVE-2026-90039, CVE-2026-90040,\nCVE-2026-90041, CVE-2026-90042, CVE-2026-90043, CVE-2026-90044,\nCVE-2026-90045, CVE-2026-90046, CVE-2026-90047, CVE-2026-90048,\nCVE-2026-90049, CVE-2026-90051, CVE-2026-90053, CVE-2026-90054,\nCVE-2026-90055, CVE-2026-90056, CVE-2026-90057, CVE-2026-90058,\nCVE-2026-90059, CVE-2026-90060, CVE-2026-90061, CVE-2026-90062,\nCVE-2026-90063, CVE-2026-90065, CVE-2026-90066, CVE-2026-90067,\nCVE-2026-90068, CVE-2026-90069, CVE-2026-90070, CVE-2026-90071,\nCVE-2026-90072, CVE-2026-90073, CVE-2026-90074, CVE-2026-90075,\nCVE-2026-90076, CVE-2026-90077, CVE-2026-90078, CVE-2026-90079,\nCVE-2026-90080, CVE-2026-90081, CVE-2026-90082, CVE-2026-90083,\nCVE-2026-90084, CVE-2026-90085, CVE-2026-90086, CVE-2026-90087,\nCVE-2026-90088, CVE-2026-90089, CVE-2026-90090, CVE-2026-90091,\nCVE-2026-90092, CVE-2026-90093, CVE-2026-90094, CVE-2026-90095,\nCVE-2026-90097, CVE-2026-90099, CVE-2026-90100, CVE-2026-90101,\nCVE-2026-90102, CVE-2026-90103, CVE-2026-90104, CVE-2026-90105,\nCVE-2026-90106, CVE-2026-90107, CVE-2026-90108, CVE-2026-90109,\nCVE-2026-90110, CVE-2026-90111, CVE-2026-90112, CVE-2026-90113,\nCVE-2026-90114, CVE-2026-90115, CVE-2026-90116, CVE-2026-90119,\nCVE-2026-90120, CVE-2026-90121, CVE-2026-90122, CVE-2026-90124,\nCVE-2026-90125, CVE-2026-90126, CVE-2026-90127, CVE-2026-90128,\nCVE-2026-90129, CVE-2026-90130, CVE-2026-90135, CVE-2026-90136,\nCVE-2026-90137, CVE-2026-90138, CVE-2026-90139, CVE-2026-90140,\nCVE-2026-90141, CVE-2026-90142, CVE-2026-90143, CVE-2026-90145,\nCVE-2026-90146, CVE-2026-90147, CVE-2026-90148, CVE-2026-90149,\nCVE-2026-90150, CVE-2026-90151, CVE-2026-90152, CVE-2026-90153,\nCVE-2026-90154, CVE-2026-90156, CVE-2026-90157, CVE-2026-90158,\nCVE-2026-90159, CVE-2026-90160, CVE-2026-90161, CVE-2026-90163,\nCVE-2026-90164, CVE-2026-90165, CVE-2026-90166, CVE-2026-90169,\nCVE-2026-90170, CVE-2026-90174, CVE-2026-90175, CVE-2026-90176,\nCVE-2026-90177, CVE-2026-90178, CVE-2026-90179, CVE-2026-90180,\nCVE-2026-90182, CVE-2026-90183, CVE-2026-90184, CVE-2026-90185,\nCVE-2026-90186, CVE-2026-90187, CVE-2026-90188, CVE-2026-90189,\nCVE-2026-90190, CVE-2026-90191, CVE-2026-90192, CVE-2026-90193,\nCVE-2026-90194, CVE-2026-90195, CVE-2026-90196, CVE-2026-90197,\nCVE-2026-90198, CVE-2026-90199, CVE-2026-90200, CVE-2026-90201,\nCVE-2026-90202, CVE-2026-90203, CVE-2026-90204, CVE-2026-90205,\nCVE-2026-90206, CVE-2026-90207, CVE-2026-90208, CVE-2026-90209,\nCVE-2026-90211, CVE-2026-90212, CVE-2026-90213, CVE-2026-90214,\nCVE-2026-90215, CVE-2026-90216, CVE-2026-90217, CVE-2026-90218,\nCVE-2026-90219, CVE-2026-90220, CVE-2026-90221, CVE-2026-90222,\nCVE-2026-90223, CVE-2026-90224, CVE-2026-90225, CVE-2026-90226,\nCVE-2026-90227, CVE-2026-90228, CVE-2026-90229, CVE-2026-90230,\nCVE-2026-90231, CVE-2026-90232, CVE-2026-90233, CVE-2026-90234,\nCVE-2026-90235, CVE-2026-90237, CVE-2026-90240, CVE-2026-90241,\nCVE-2026-90242, CVE-2026-90243, CVE-2026-90244, CVE-2026-90245,\nCVE-2026-90246, CVE-2026-90247, CVE-2026-90248, CVE-2026-90249,\nCVE-2026-90250, CVE-2026-90251, CVE-2026-90252, CVE-2026-90253,\nCVE-2026-90254, CVE-2026-90255, CVE-2026-90256, CVE-2026-90257,\nCVE-2026-90258, CVE-2026-90259, CVE-2026-90260, CVE-2026-90261,\nCVE-2026-90262, CVE-2026-90263, CVE-2026-90264, CVE-2026-90265,\nCVE-2026-90267, CVE-2026-90269, CVE-2026-90270, CVE-2026-90271,\nCVE-2026-90272, CVE-2026-90273, CVE-2026-90274, CVE-2026-90275,\nCVE-2026-90276, CVE-2026-90277, CVE-2026-90278, CVE-2026-90279,\nCVE-2026-90280, CVE-2026-90281, CVE-2026-90282, CVE-2026-90283,\nCVE-2026-90284, CVE-2026-90285, CVE-2026-90286, CVE-2026-90287,\nCVE-2026-90288, CVE-2026-90289, CVE-2026-90290, CVE-2026-90291,\nCVE-2026-90292, CVE-2026-90293, CVE-2026-90294, CVE-2026-90295,\nCVE-2026-90296, CVE-2026-90297, CVE-2026-90298, CVE-2026-90300,\nCVE-2026-90301, CVE-2026-90302, CVE-2026-90303, CVE-2026-90306,\nCVE-2026-90307, CVE-2026-90308, CVE-2026-90309, CVE-2026-90311,\nCVE-2026-90312, CVE-2026-90313, CVE-2026-90314, CVE-2026-90315,\nCVE-2026-90316, CVE-2026-90318, CVE-2026-90319, CVE-2026-90320,\nCVE-2026-90321, CVE-2026-90322, CVE-2026-90323, CVE-2026-90324,\nCVE-2026-90325, CVE-2026-90326, CVE-2026-90327, CVE-2026-90328,\nCVE-2026-90329, CVE-2026-90330, CVE-2026-90331, CVE-2026-90332,\nCVE-2026-90333, CVE-2026-90334, CVE-2026-90335, CVE-2026-90336,\nCVE-2026-90337, CVE-2026-90338, CVE-2026-90341, CVE-2026-90342,\nCVE-2026-90343, CVE-2026-90344, CVE-2026-90345, CVE-2026-90346,\nCVE-2026-90347, CVE-2026-90348, CVE-2026-90349, CVE-2026-90350,\nCVE-2026-90351, CVE-2026-90352, CVE-2026-90353, CVE-2026-90354,\nCVE-2026-90355, CVE-2026-90356, CVE-2026-90357, CVE-2026-90358,\nCVE-2026-90359, CVE-2026-90360, CVE-2026-90361, CVE-2026-90362,\nCVE-2026-90363, CVE-2026-90364, CVE-2026-90365, CVE-2026-90366,\nCVE-2026-90367, CVE-2026-90368, CVE-2026-90369, CVE-2026-90370,\nCVE-2026-90371, CVE-2026-90372, CVE-2026-90373, CVE-2026-90374,\nCVE-2026-90375, CVE-2026-90376, CVE-2026-90377, CVE-2026-90378,\nCVE-2026-90379, CVE-2026-90380, CVE-2026-90381, CVE-2026-90382,\nCVE-2026-90383, CVE-2026-90384, CVE-2026-90385, CVE-2026-90386,\nCVE-2026-90387, CVE-2026-90388, CVE-2026-90389, CVE-2026-90390,\nCVE-2026-90391, CVE-2026-90392, CVE-2026-90393, CVE-2026-90394,\nCVE-2026-90395, CVE-2026-90396, CVE-2026-90397, CVE-2026-90398,\nCVE-2026-90399, CVE-2026-90400, CVE-2026-90401, CVE-2026-90402,\nCVE-2026-90403, CVE-2026-90404, CVE-2026-90406, CVE-2026-90407,\nCVE-2026-90408, CVE-2026-90409, CVE-2026-90410, CVE-2026-90411,\nCVE-2026-90412, CVE-2026-90413, CVE-2026-90414, CVE-2026-90415,\nCVE-2026-90416, CVE-2026-90417, CVE-2026-90418, CVE-2026-90419,\nCVE-2026-90420, CVE-2026-90421, CVE-2026-90422, CVE-2026-90423,\nCVE-2026-90424, CVE-2026-90425, CVE-2026-90426, CVE-2026-90427,\nCVE-2026-90428, CVE-2026-90429, CVE-2026-90430, CVE-2026-90431,\nCVE-2026-90433, CVE-2026-90434, CVE-2026-90435, CVE-2026-92476,\nCVE-2026-92477, CVE-2026-92479, CVE-2026-92480, CVE-2026-92481,\nCVE-2026-92482, CVE-2026-92483, CVE-2026-92484, CVE-2026-92485,\nCVE-2026-92486, CVE-2026-92488, CVE-2026-92489, CVE-2026-92490,\nCVE-2026-92491, CVE-2026-92493, CVE-2026-92494, CVE-2026-92495,\nCVE-2026-92496, CVE-2026-92497, CVE-2026-92498, CVE-2026-92499,\nCVE-2026-92500, CVE-2026-92501, CVE-2026-92503, CVE-2026-92504,\nCVE-2026-92505, CVE-2026-92506, CVE-2026-92507, CVE-2026-92508,\nCVE-2026-92509, CVE-2026-92510, CVE-2026-92511, CVE-2026-92512,\nCVE-2026-92513, CVE-2026-92514, CVE-2026-92515, CVE-2026-92516,\nCVE-2026-92517, CVE-2026-92518, CVE-2026-92519, CVE-2026-92520,\nCVE-2026-92521, CVE-2026-92522, CVE-2026-92523, CVE-2026-92524,\nCVE-2026-92525, CVE-2026-93037, CVE-2026-93039, CVE-2026-93040,\nCVE-2026-93041, CVE-2026-93042, CVE-2026-93043, CVE-2026-93044,\nCVE-2026-93045, CVE-2026-93046, CVE-2026-93047, CVE-2026-93048,\nCVE-2026-93049, CVE-2026-93050, CVE-2026-93051, CVE-2026-93052,\nCVE-2026-93053, CVE-2026-93054, CVE-2026-93055, CVE-2026-93056,\nCVE-2026-93058, CVE-2026-93059, CVE-2026-93061, CVE-2026-93062,\nCVE-2026-93063, CVE-2026-93064, CVE-2026-93065, CVE-2026-93066,\nCVE-2026-93067, CVE-2026-93068, CVE-2026-93069, CVE-2026-93070,\nCVE-2026-93071, CVE-2026-93072, CVE-2026-93073, CVE-2026-93077,\nCVE-2026-93078, CVE-2026-93079, CVE-2026-93080, CVE-2026-93081,\nCVE-2026-93082, CVE-2026-93083, CVE-2026-93084, CVE-2026-93085,\nCVE-2026-93086, CVE-2026-93089, CVE-2026-93090, CVE-2026-93091,\nCVE-2026-93092, CVE-2026-93093, CVE-2026-93094, CVE-2026-93095,\nCVE-2026-93096, CVE-2026-93097, CVE-2026-93098, CVE-2026-93099,\nCVE-2026-93100, CVE-2026-93101, CVE-2026-93102, CVE-2026-93103,\nCVE-2026-93104, CVE-2026-93105, CVE-2026-93106, CVE-2026-93107,\nCVE-2026-93108, CVE-2026-93109, CVE-2026-93110, CVE-2026-93112,\nCVE-2026-93113, CVE-2026-93114, CVE-2026-93115, CVE-2026-93116,\nCVE-2026-93117, CVE-2026-93118, CVE-2026-93119, CVE-2026-93120,\nCVE-2026-93121, CVE-2026-93122, CVE-2026-93123, CVE-2026-93125,\nCVE-2026-93126, CVE-2026-93127, CVE-2026-93128, CVE-2026-93129,\nCVE-2026-93130, CVE-2026-93131, CVE-2026-93132, CVE-2026-93133,\nCVE-2026-93134, CVE-2026-93135, CVE-2026-93136, CVE-2026-93137,\nCVE-2026-93138, CVE-2026-93140, CVE-2026-93141, CVE-2026-93142,\nCVE-2026-93143, CVE-2026-93144, CVE-2026-93145, CVE-2026-93146,\nCVE-2026-93148, CVE-2026-93149, CVE-2026-93150, CVE-2026-93151,\nCVE-2026-93152, CVE-2026-93153, CVE-2026-93154, CVE-2026-93155,\nCVE-2026-93156, CVE-2026-93157, CVE-2026-93158, CVE-2026-93159,\nCVE-2026-93160, CVE-2026-93161, CVE-2026-93162, CVE-2026-93163,\nCVE-2026-93164, CVE-2026-93165, CVE-2026-93167, CVE-2026-93168,\nCVE-2026-93169, CVE-2026-93170, CVE-2026-93172, CVE-2026-93173,\nCVE-2026-93174, CVE-2026-93176, CVE-2026-93177, CVE-2026-93178,\nCVE-2026-93179, CVE-2026-93181, CVE-2026-93182, CVE-2026-93183,\nCVE-2026-93184, CVE-2026-93185, CVE-2026-93186, CVE-2026-93188,\nCVE-2026-93189, CVE-2026-93190, CVE-2026-93191, CVE-2026-93192,\nCVE-2026-93193, CVE-2026-93194, CVE-2026-93195, CVE-2026-93196,\nCVE-2026-93198, CVE-2026-93199, CVE-2026-93200, CVE-2026-93201,\nCVE-2026-93202, CVE-2026-93203, CVE-2026-93204, CVE-2026-93205,\nCVE-2026-93206, CVE-2026-93207, CVE-2026-93208, CVE-2026-93209,\nCVE-2026-93210, CVE-2026-93211, CVE-2026-93212, CVE-2026-93213,\nCVE-2026-93214, CVE-2026-93215, CVE-2026-93216, CVE-2026-93217,\nCVE-2026-93218, CVE-2026-93219, CVE-2026-93220, CVE-2026-93221,\nCVE-2026-93222, CVE-2026-93223, CVE-2026-93224, CVE-2026-93225,\nCVE-2026-93226, CVE-2026-93227, CVE-2026-93228, CVE-2026-93229,\nCVE-2026-93230, CVE-2026-93231, CVE-2026-93233, CVE-2026-93234,\nCVE-2026-93235, CVE-2026-93236, CVE-2026-93237, CVE-2026-93238,\nCVE-2026-93239, CVE-2026-93240, CVE-2026-93241, CVE-2026-93242,\nCVE-2026-93243, CVE-2026-93244, CVE-2026-93245, CVE-2026-93247,\nCVE-2026-93248, CVE-2026-93249, CVE-2026-93250, CVE-2026-93251,\nCVE-2026-93252, CVE-2026-93253, CVE-2026-93256, CVE-2026-93258,\nCVE-2026-93259, CVE-2026-93260, CVE-2026-93261, CVE-2026-93262,\nCVE-2026-93264, CVE-2026-93265, CVE-2026-93266, CVE-2026-93267,\nCVE-2026-93268, CVE-2026-93269, CVE-2026-93270, CVE-2026-93271,\nCVE-2026-93272, CVE-2026-93273, CVE-2026-93274, CVE-2026-93275,\nCVE-2026-93276, CVE-2026-93280, CVE-2026-93281, CVE-2026-93282,\nCVE-2026-93283, CVE-2026-93284, CVE-2026-93285, CVE-2026-93286,\nCVE-2026-93287, CVE-2026-93288, CVE-2026-93781, CVE-2026-93782,\nCVE-2026-93783, CVE-2026-93784, CVE-2026-93785, CVE-2026-93786,\nCVE-2026-93787, CVE-2026-93788, CVE-2026-93789, CVE-2026-93790,\nCVE-2026-93791, CVE-2026-93792, CVE-2026-93793, CVE-2026-93794,\nCVE-2026-93795, CVE-2026-93796, CVE-2026-93797, CVE-2026-93798,\nCVE-2026-93799, CVE-2026-93800, CVE-2026-93801, CVE-2026-93802,\nCVE-2026-93803, CVE-2026-93804, CVE-2026-93805, CVE-2026-93806,\nCVE-2026-93807, CVE-2026-93808, CVE-2026-93809, CVE-2026-93810,\nCVE-2026-93811, CVE-2026-93812, CVE-2026-93813, CVE-2026-93814,\nCVE-2026-93815, CVE-2026-93816, CVE-2026-93817, CVE-2026-93818,\nCVE-2026-93819, CVE-2026-93820, CVE-2026-93821, CVE-2026-93822,\nCVE-2026-93823, CVE-2026-93824, CVE-2026-93825, CVE-2026-93826,\nCVE-2026-93827, CVE-2026-93828, CVE-2026-93829, CVE-2026-93830,\nCVE-2026-97407, CVE-2026-97408, CVE-2026-97409, CVE-2026-97410,\nCVE-2026-97411, CVE-2026-97412, CVE-2026-97413, CVE-2026-97414,\nCVE-2026-97415, CVE-2026-97416, CVE-2026-97417, CVE-2026-97418,\nCVE-2026-97419, CVE-2026-97420, CVE-2026-97421, CVE-2026-97422,\nCVE-2026-97423, CVE-2026-97424, CVE-2026-97425, CVE-2026-97426,\nCVE-2026-97427, CVE-2026-97428, CVE-2026-97429, CVE-2026-97430,\nCVE-2026-97431, CVE-2026-97432, CVE-2026-97433, CVE-2026-97434,\nCVE-2026-97435, CVE-2026-97436, CVE-2026-97437, CVE-2026-97438,\nCVE-2026-97439, CVE-2026-97440, CVE-2026-97441, CVE-2026-97442,\nCVE-2026-97443, CVE-2026-97444, CVE-2026-97445, CVE-2026-97446,\nCVE-2026-97447, CVE-2026-97448, CVE-2026-97449, CVE-2026-97450,\nCVE-2026-97451, CVE-2026-97452, CVE-2026-97453, CVE-2026-97454,\nCVE-2026-97455, CVE-2026-97456, CVE-2026-97472, CVE-2026-97473,\nCVE-2026-97474, CVE-2026-97475, CVE-2026-97476, CVE-2026-97477,\nCVE-2026-97478, CVE-2026-97479, CVE-2026-97480, CVE-2026-97481,\nCVE-2026-97482, CVE-2026-97483, CVE-2026-97484, CVE-2026-97485,\nCVE-2026-97486, CVE-2026-97487, CVE-2026-97488, CVE-2026-97489,\nCVE-2026-97490, CVE-2026-97491, CVE-2026-97492, CVE-2026-97493,\nCVE-2026-97494, CVE-2026-97495, CVE-2026-97496, CVE-2026-97497,\nCVE-2026-97498, CVE-2026-97499, CVE-2026-97500, CVE-2026-97501,\nCVE-2026-97502, CVE-2026-97503, CVE-2026-97505, CVE-2026-97506,\nCVE-2026-97507, CVE-2026-97511, CVE-2026-97512, CVE-2026-97513,\nCVE-2026-97514, CVE-2026-97515, CVE-2026-97516, CVE-2026-97517,\nCVE-2026-97518, CVE-2026-97519, CVE-2026-97520, CVE-2026-97521,\nCVE-2026-97522, CVE-2026-97523, CVE-2026-97524, CVE-2026-97525,\nCVE-2026-97526, CVE-2026-97527, CVE-2026-97528, CVE-2026-97529,\nCVE-2026-97530, CVE-2026-97531, CVE-2026-97532, CVE-2026-97533,\nCVE-2026-97534, CVE-2026-97535, CVE-2026-97536, CVE-2026-97537,\nCVE-2026-97538, CVE-2026-97539, CVE-2026-97540, CVE-2026-97541,\nCVE-2026-97542, CVE-2026-97543, CVE-2026-97544, CVE-2026-97545,\nCVE-2026-97546, CVE-2026-97547, CVE-2026-97548, CVE-2026-97549,\nCVE-2026-97550, CVE-2026-97551, CVE-2026-97552, CVE-2026-97553,\nCVE-2026-97554, CVE-2026-97555, CVE-2026-97556, CVE-2026-97557,\nCVE-2026-97558, CVE-2026-97559, CVE-2026-97560, CVE-2026-97561,\nCVE-2026-97562, CVE-2026-97563, CVE-2026-97564, CVE-2026-97565,\nCVE-2026-97566, CVE-2026-97567, CVE-2026-97568, CVE-2026-97571,\nCVE-2026-97572, CVE-2026-97573, CVE-2026-97574, CVE-2026-97575,\nCVE-2026-97576, CVE-2026-97577, CVE-2026-97578, CVE-2026-97579,\nCVE-2026-97580, CVE-2026-97581, CVE-2026-97582, CVE-2026-97583,\nCVE-2026-97584, CVE-2026-97585, CVE-2026-97586, CVE-2026-97587,\nCVE-2026-97588, CVE-2026-97589, CVE-2026-97590, CVE-2026-97591,\nCVE-2026-97592, CVE-2026-97593, CVE-2026-97594, CVE-2026-97595,\nCVE-2026-97596, CVE-2026-97597, CVE-2026-97598, CVE-2026-97599,\nCVE-2026-97600, CVE-2026-97601, CVE-2026-97602, CVE-2026-97603,\nCVE-2026-97604, CVE-2026-97605, CVE-2026-97606, CVE-2026-97607,\nCVE-2026-97608, CVE-2026-97609, CVE-2026-97610, CVE-2026-97611,\nCVE-2026-97612, CVE-2026-97613, CVE-2026-97614, CVE-2026-97615,\nCVE-2026-97616, CVE-2026-97617, CVE-2026-97618, CVE-2026-97619,\nCVE-2026-97620, CVE-2026-97621, CVE-2026-97899, CVE-2026-97900,\nCVE-2026-97901, CVE-2026-97902, CVE-2026-97903, CVE-2026-97904,\nCVE-2026-97905, CVE-2026-97906, CVE-2026-97907, CVE-2026-97908,\nCVE-2026-97909, CVE-2026-97910, CVE-2026-97912, CVE-2026-97913,\nCVE-2026-97914, CVE-2026-97915, CVE-2026-97916, CVE-2026-97917,\nCVE-2026-97918, CVE-2026-97919, CVE-2026-97920, CVE-2026-97921,\nCVE-2026-97922, CVE-2026-97923, CVE-2026-97924, CVE-2026-97925,\nCVE-2026-97926, CVE-2026-97927, CVE-2026-97928, CVE-2026-97929,\nCVE-2026-97930, CVE-2026-97931, CVE-2026-97932, CVE-2026-97933,\nCVE-2026-97934, CVE-2026-97935, CVE-2026-97936, CVE-2026-97938,\nCVE-2026-97939, CVE-2026-97940, CVE-2026-97942, CVE-2026-97943,\nCVE-2026-97944, CVE-2026-97945, CVE-2026-97946, CVE-2026-97947,\nCVE-2026-97948, CVE-2026-97950, CVE-2026-97951, CVE-2026-97953,\nCVE-2026-97954, CVE-2026-97955, CVE-2026-97956, CVE-2026-97957,\nCVE-2026-97958, CVE-2026-97959, CVE-2026-97960, CVE-2026-97961,\nCVE-2026-97962, CVE-2026-97963, CVE-2026-97964, CVE-2026-97965,\nCVE-2026-97966, CVE-2026-97967, CVE-2026-97968, CVE-2026-97969,\nCVE-2026-97970, CVE-2026-97971, CVE-2026-97972, CVE-2026-97973,\nCVE-2026-97974, CVE-2026-97975, CVE-2026-97976, CVE-2026-97977,\nCVE-2026-97978, CVE-2026-97979, CVE-2026-97981, CVE-2026-97982,\nCVE-2026-97983, CVE-2026-97984, CVE-2026-97985, CVE-2026-97986,\nCVE-2026-97987, CVE-2026-97988, CVE-2026-97989, CVE-2026-97990,\nCVE-2026-97991, CVE-2026-97992, CVE-2026-97993, CVE-2026-97994,\nCVE-2026-97995, CVE-2026-97996, CVE-2026-97997, CVE-2026-97998,\nCVE-2026-98000, CVE-2026-98001, CVE-2026-98002, CVE-2026-98003,\nCVE-2026-98004, CVE-2026-98005, CVE-2026-98006, CVE-2026-98007,\nCVE-2026-98008, CVE-2026-98009, CVE-2026-98010, CVE-2026-98011,\nCVE-2026-98012, CVE-2026-98013, CVE-2026-98014, CVE-2026-98015,\nCVE-2026-98016, CVE-2026-98017, CVE-2026-98018, CVE-2026-98019,\nCVE-2026-98020, CVE-2026-98021, CVE-2026-98022, CVE-2026-98023,\nCVE-2026-98024, CVE-2026-98025, CVE-2026-98026, CVE-2026-98027,\nCVE-2026-98028, CVE-2026-98029, CVE-2026-98030, CVE-2026-98031,\nCVE-2026-98032, CVE-2026-98033, CVE-2026-98034, CVE-2026-98037,\nCVE-2026-98039, CVE-2026-98041, CVE-2026-98043, CVE-2026-98044,\nCVE-2026-98045, CVE-2026-98046, CVE-2026-98047, CVE-2026-98048,\nCVE-2026-98049, CVE-2026-98050, CVE-2026-98051, CVE-2026-98052,\nCVE-2026-98053, CVE-2026-98054, CVE-2026-98055, CVE-2026-98056,\nCVE-2026-98057, CVE-2026-98058, CVE-2026-98059, CVE-2026-98060,\nCVE-2026-98061, CVE-2026-98062, CVE-2026-98063, CVE-2026-98064,\nCVE-2026-98065, CVE-2026-98066, CVE-2026-98067, CVE-2026-98068,\nCVE-2026-98069, CVE-2026-98070, CVE-2026-98071, CVE-2026-98072,\nCVE-2026-98073, CVE-2026-98074, CVE-2026-98075, CVE-2026-98076,\nCVE-2026-98077, CVE-2026-98078, CVE-2026-98079, CVE-2026-98080,\nCVE-2026-98081, CVE-2026-98082, CVE-2026-98083, CVE-2026-98084,\nCVE-2026-98085, CVE-2026-98086, CVE-2026-98087, CVE-2026-98088,\nCVE-2026-98089, CVE-2026-98090, CVE-2026-98091, CVE-2026-98092,\nCVE-2026-98093, CVE-2026-98094, CVE-2026-98095, CVE-2026-98096,\nCVE-2026-98097, CVE-2026-98098, CVE-2026-98099, CVE-2026-98101,\nCVE-2026-98102, CVE-2026-98103, CVE-2026-98104, CVE-2026-98105,\nCVE-2026-98106, CVE-2026-98107, CVE-2026-98108, CVE-2026-98109,\nCVE-2026-98110, CVE-2026-98111, CVE-2026-98112, CVE-2026-98113,\nCVE-2026-98114, CVE-2026-98115, CVE-2026-98116, CVE-2026-98117,\nCVE-2026-98118, CVE-2026-98119, CVE-2026-98120, CVE-2026-98121,\nCVE-2026-98122, CVE-2026-98123, CVE-2026-98124, CVE-2026-98125,\nCVE-2026-98126, CVE-2026-98127, CVE-2026-98128, CVE-2026-98129,\nCVE-2026-98130, CVE-2026-98131, CVE-2026-98134, CVE-2026-98142,\nCVE-2026-98143, CVE-2026-98146, CVE-2026-98147, CVE-2026-98148,\nCVE-2026-98149, CVE-2026-98150, CVE-2026-98151, CVE-2026-98152,\nCVE-2026-98153, CVE-2026-98154, CVE-2026-98155, CVE-2026-98156,\nCVE-2026-98157, CVE-2026-98158, CVE-2026-98159, CVE-2026-98160,\nCVE-2026-98161, CVE-2026-98162, CVE-2026-98163, CVE-2026-98164,\nCVE-2026-98166, CVE-2026-98167, CVE-2026-98168, CVE-2026-98169,\nCVE-2026-98170, CVE-2026-98171, CVE-2026-98172, CVE-2026-98173,\nCVE-2026-98174, CVE-2026-98175, CVE-2026-98176, CVE-2026-98177,\nCVE-2026-98179, CVE-2026-98180, CVE-2026-98181, CVE-2026-98182,\nCVE-2026-98184, CVE-2026-98185, CVE-2026-98186, CVE-2026-98187,\nCVE-2026-98188, CVE-2026-98189, CVE-2026-98190, CVE-2026-98191,\nCVE-2026-98192, CVE-2026-98193, CVE-2026-98194, CVE-2026-98195,\nCVE-2026-98196, CVE-2026-98197, CVE-2026-98198, CVE-2026-98199,\nCVE-2026-98200, CVE-2026-98201, CVE-2026-98202, CVE-2026-98203,\nCVE-2026-98204, CVE-2026-98205, CVE-2026-98206, CVE-2026-98207,\nCVE-2026-98208, CVE-2026-98209, CVE-2026-98210, CVE-2026-98211,\nCVE-2026-98212, CVE-2026-98213, CVE-2026-98214, CVE-2026-98215,\nCVE-2026-98216, CVE-2026-98217, CVE-2026-98218, CVE-2026-98221,\nCVE-2026-98222, CVE-2026-98223, CVE-2026-98224, CVE-2026-98226,\nCVE-2026-98227, CVE-2026-98228, CVE-2026-98229, CVE-2026-98230,\nCVE-2026-98231, CVE-2026-98232, CVE-2026-98233, CVE-2026-98234,\nCVE-2026-98235, CVE-2026-98236, CVE-2026-98237, CVE-2026-98238,\nCVE-2026-98239, CVE-2026-98240, CVE-2026-98241, CVE-2026-98242,\nCVE-2026-98244, CVE-2026-98245, CVE-2026-98246, CVE-2026-98247,\nCVE-2026-98248, CVE-2026-98249, CVE-2026-98251, CVE-2026-98252,\nCVE-2026-98253, CVE-2026-98254, CVE-2026-98255, CVE-2026-98256,\nCVE-2026-98257, CVE-2026-98258, CVE-2026-98259, CVE-2026-98260,\nCVE-2026-98261, CVE-2026-98262, CVE-2026-98263, CVE-2026-98264,\nCVE-2026-98265, CVE-2026-98266, CVE-2026-98267, CVE-2026-98268,\nCVE-2026-98269, CVE-2026-98270, CVE-2026-98271, CVE-2026-98272,\nCVE-2026-98273, CVE-2026-98274, CVE-2026-98275, CVE-2026-98276,\nCVE-2026-98277, CVE-2026-98278, CVE-2026-98279, CVE-2026-98280,\nCVE-2026-98281, CVE-2026-98282, CVE-2026-98283, CVE-2026-98284,\nCVE-2026-98285, CVE-2026-98286, CVE-2026-98287, CVE-2026-98288,\nCVE-2026-98289, CVE-2026-98290, CVE-2026-98291, CVE-2026-98292,\nCVE-2026-98293, CVE-2026-98294, CVE-2026-98295, CVE-2026-98296,\nCVE-2026-98297, CVE-2026-98298, CVE-2026-98299, CVE-2026-98300,\nCVE-2026-98301, CVE-2026-98302, CVE-2026-98303, CVE-2026-98304,\nCVE-2026-98306, CVE-2026-98307, CVE-2026-98308, CVE-2026-98309,\nCVE-2026-98311, CVE-2026-98312, CVE-2026-98314, CVE-2026-98317,\nCVE-2026-98318, CVE-2026-98319, CVE-2026-98320, CVE-2026-98321,\nCVE-2026-98322, CVE-2026-98323, CVE-2026-98324, CVE-2026-98325,\nCVE-2026-98326, CVE-2026-98327, CVE-2026-98328, CVE-2026-98329,\nCVE-2026-98330, CVE-2026-98331, CVE-2026-98332, CVE-2026-98333,\nCVE-2026-98334, CVE-2026-98335, CVE-2026-98336, CVE-2026-98337,\nCVE-2026-98338, CVE-2026-98339, CVE-2026-98340, CVE-2026-98341,\nCVE-2026-98342, CVE-2026-98343, CVE-2026-98344, CVE-2026-98345,\nCVE-2026-98346, CVE-2026-98347, CVE-2026-98348, CVE-2026-98349,\nCVE-2026-98350, CVE-2026-98351, CVE-2026-98352, CVE-2026-98354,\nCVE-2026-98355, CVE-2026-98356, CVE-2026-98357, CVE-2026-98358,\nCVE-2026-98359, CVE-2026-98360, CVE-2026-98361, CVE-2026-98362,\nCVE-2026-98363, CVE-2026-98364, CVE-2026-98365, CVE-2026-98366,\nCVE-2026-98367, CVE-2026-98368, CVE-2026-98369, CVE-2026-98370,\nCVE-2026-98371, CVE-2026-98372, CVE-2026-98373, CVE-2026-98374,\nCVE-2026-98377, CVE-2026-98378, CVE-2026-98379, CVE-2026-98380,\nCVE-2026-98381, CVE-2026-98382, CVE-2026-98383, CVE-2026-98384,\nCVE-2026-98386, CVE-2026-98387, CVE-2026-98388, CVE-2026-98389,\nCVE-2026-98390, CVE-2026-98391, CVE-2026-98392, CVE-2026-98393,\nCVE-2026-98394, CVE-2026-98398, CVE-2026-98399, CVE-2026-98400,\nCVE-2026-98401, CVE-2026-98402, CVE-2026-98403, CVE-2026-98404,\nCVE-2026-98406, CVE-2026-98407, CVE-2026-98408, CVE-2026-98409,\nCVE-2026-98410, CVE-2026-98411, CVE-2026-98412, CVE-2026-98413,\nCVE-2026-98414, CVE-2026-98415, CVE-2026-98416, CVE-2026-98417,\nCVE-2026-98419, CVE-2026-98421, CVE-2026-98422, CVE-2026-98423,\nCVE-2026-98424, CVE-2026-98425, CVE-2026-98426, CVE-2026-98427,\nCVE-2026-98428, CVE-2026-98429, CVE-2026-98430, CVE-2026-98431,\nCVE-2026-98433, CVE-2026-98434, CVE-2026-98435, CVE-2026-98436,\nCVE-2026-98437, CVE-2026-98439, CVE-2026-98440, CVE-2026-98441,\nCVE-2026-98442, CVE-2026-98443, CVE-2026-98444, CVE-2026-98445,\nCVE-2026-98446, CVE-2026-98447, CVE-2026-98448, CVE-2026-98449,\nCVE-2026-98450, CVE-2026-98451, CVE-2026-98452, CVE-2026-98453,\nCVE-2026-98454, CVE-2026-98455, CVE-2026-98456, CVE-2026-98457,\nCVE-2026-98458, CVE-2026-98459, CVE-2026-98460, CVE-2026-98461,\nCVE-2026-98462, CVE-2026-98463, CVE-2026-98464, CVE-2026-98465,\nCVE-2026-98466, CVE-2026-98467, CVE-2026-98468, CVE-2026-98469,\nCVE-2026-98470, CVE-2026-98471, CVE-2026-98472, CVE-2026-98473,\nCVE-2026-98474, CVE-2026-98475, CVE-2026-98476, CVE-2026-98477,\nCVE-2026-98478, CVE-2026-98479, CVE-2026-98480, CVE-2026-98481,\nCVE-2026-98482, CVE-2026-98483, CVE-2026-98484, CVE-2026-98485,\nCVE-2026-98486, CVE-2026-98487, CVE-2026-98488, CVE-2026-98489,\nCVE-2026-98490, CVE-2026-98491, CVE-2026-98492, CVE-2026-98493,\nCVE-2026-98494, CVE-2026-98495, CVE-2026-98496, CVE-2026-98497,\nCVE-2026-98498, CVE-2026-98499, CVE-2026-98501, CVE-2026-98502,\nCVE-2026-98503, CVE-2026-98504, CVE-2026-98505, CVE-2026-98506,\nCVE-2026-98507, CVE-2026-98508, CVE-2026-98509, CVE-2026-98510,\nCVE-2026-98511, CVE-2026-98512, CVE-2026-98513, CVE-2026-98514,\nCVE-2026-98515, CVE-2026-98516, CVE-2026-98517, CVE-2026-98518,\nCVE-2026-98519, CVE-2026-98521, CVE-2026-98522, CVE-2026-98523,\nCVE-2026-98524, CVE-2026-98525, CVE-2026-98526, CVE-2026-98527,\nCVE-2026-98528, CVE-2026-98529, CVE-2026-98530, CVE-2026-98531,\nCVE-2026-98532, CVE-2026-98533, CVE-2026-98534, CVE-2026-98535,\nCVE-2026-98536, CVE-2026-98537, CVE-2026-98538, CVE-2026-98539,\nCVE-2026-98541, CVE-2026-98542, CVE-2026-98543, CVE-2026-98544,\nCVE-2026-98545, CVE-2026-98546, CVE-2026-98547, CVE-2026-98548,\nCVE-2026-98549, CVE-2026-98550, CVE-2026-98551, CVE-2026-98552,\nCVE-2026-98553, CVE-2026-98554, CVE-2026-98555, CVE-2026-98556,\nCVE-2026-98558, CVE-2026-98559, CVE-2026-98560, CVE-2026-98561,\nCVE-2026-98562, CVE-2026-98563, CVE-2026-98564, CVE-2026-98565,\nCVE-2026-98566, CVE-2026-98567, CVE-2026-98568, CVE-2026-98569,\nCVE-2026-98570, CVE-2026-98571, CVE-2026-98572, CVE-2026-98573,\nCVE-2026-98574, CVE-2026-98575, CVE-2026-98576, CVE-2026-98577,\nCVE-2026-98578, CVE-2026-98579, CVE-2026-98580, CVE-2026-98581,\nCVE-2026-98582, CVE-2026-98583, CVE-2026-98584, CVE-2026-98585,\nCVE-2026-98586, CVE-2026-98588, CVE-2026-98589, CVE-2026-98590,\nCVE-2026-98591, CVE-2026-98592, CVE-2026-98593, CVE-2026-98594,\nCVE-2026-98595, CVE-2026-98596, CVE-2026-98597, CVE-2026-98598,\nCVE-2026-98599, CVE-2026-98601, CVE-2026-98602, CVE-2026-98603,\nCVE-2026-98604, CVE-2026-98605, CVE-2026-98606, CVE-2026-98607,\nCVE-2026-98608, CVE-2026-98609, CVE-2026-98610, CVE-2026-98611,\nCVE-2026-98612, CVE-2026-98613, CVE-2026-98614, CVE-2026-98615,\nCVE-2026-98616, CVE-2026-98617, CVE-2026-98618, CVE-2026-98620,\nCVE-2026-98621, CVE-2026-98622, CVE-2026-98623, CVE-2026-98624,\nCVE-2026-98625, CVE-2026-98626, CVE-2026-98628, CVE-2026-98629,\nCVE-2026-98630, CVE-2026-98631, CVE-2026-98632, CVE-2026-98633,\nCVE-2026-98634, CVE-2026-98635, CVE-2026-98636, CVE-2026-98637,\nCVE-2026-98638, CVE-2026-98639, CVE-2026-98640, CVE-2026-98641,\nCVE-2026-98642, CVE-2026-98643, CVE-2026-98644, CVE-2026-98646,\nCVE-2026-98647, CVE-2026-98648, CVE-2026-98649, CVE-2026-98650,\nCVE-2026-98651, CVE-2026-98652, CVE-2026-98653, CVE-2026-98867,\nCVE-2026-98868, CVE-2026-98871, CVE-2026-98872, CVE-2026-98873,\nCVE-2026-98874, CVE-2026-98875, CVE-2026-98876, CVE-2026-98877,\nCVE-2026-98878, CVE-2026-98879, CVE-2026-98880, CVE-2026-98881,\nCVE-2026-98882, CVE-2026-98883, CVE-2026-98884, CVE-2026-98885,\nCVE-2026-98886, CVE-2026-98887, CVE-2026-98888, CVE-2026-98889,\nCVE-2026-98891, CVE-2026-98892, CVE-2026-98893, CVE-2026-98894,\nCVE-2026-98895, CVE-2026-98897, CVE-2026-98898, CVE-2026-98899,\nCVE-2026-98900, CVE-2026-98901, CVE-2026-98902, CVE-2026-98903,\nCVE-2026-98904, CVE-2026-98905, CVE-2026-98906, CVE-2026-98907,\nCVE-2026-98908, CVE-2026-98909, CVE-2026-98910, CVE-2026-98911,\nCVE-2026-98912, CVE-2026-98913, CVE-2026-98914, CVE-2026-98915,\nCVE-2026-98916, CVE-2026-98917, CVE-2026-98918, CVE-2026-98919,\nCVE-2026-98921, CVE-2026-98923, CVE-2026-98924, CVE-2026-98925,\nCVE-2026-98926, CVE-2026-98927, CVE-2026-98928, CVE-2026-98929,\nCVE-2026-98930)\n","status":"published","published":"2026-11-03T11:03:02Z","modified":"2026-11-09T12:49:43.015417372Z","updated_at":"2026-11-09T13:27:42.046613Z"},{"id":"USN-9002-1","title":"linux-nvidia-tegra vulnerabilities","description":"It was discovered that the io_uring subsystem in the Linux kernel did not\nproperly handle canceled task work when processing certain wait operations,\nleading to the operation being performed in the wrong task context. A local\nattacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2026-81010)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - MIPS architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - x86 architecture;\n  - Intel NPU Driver;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Auxiliary display drivers;\n  - Ublk userspace block driver;\n  - Bluetooth drivers;\n  - Character device driver;\n  - CPU idle management framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - ARM SCMI message protocol;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - HSI subsystem;\n  - Hardware monitoring drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - On-Chip Interconnect management framework;\n  - IOMMU subsystem;\n  - Multiple devices driver;\n  - Media drivers;\n  - Fastrpc Driver;\n  - Amazon Nitro Secure Module driver;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Microsoft Azure Network Adapter (MANA) driver;\n  - Texas Instruments network drivers;\n  - MediaTek network drivers;\n  - NTB driver;\n  - NVDIMM (Non-Volatile Memory Device) drivers;\n  - NVME drivers;\n  - NVMEM (Non Volatile Memory) drivers;\n  - PCI subsystem;\n  - Chrome hardware platform drivers;\n  - x86 platform drivers;\n  - Power supply drivers;\n  - RapidIO drivers;\n  - Voltage and Current Regulator drivers;\n  - S/390 drivers;\n  - SCSI subsystem;\n  - SLIMbus drivers;\n  - NVIDIA Tegra SoC drivers;\n  - Realtek RTL8723BS SDIO drivers;\n  - TCM subsystem;\n  - Trusted Execution Environment drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - USB Device Class drivers;\n  - Faraday FOTG210 USB2 dual-role controller driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - Siemens ID Mouse USB driver;\n  - IOWarrior USB driver;\n  - LD Didactic USB driver;\n  - LEGO USB Tower driver;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - USB Type-C Connector System Software Interface driver;\n  - USB over IP driver;\n  - VFIO drivers;\n  - Framebuffer layer;\n  - W1 Dallas's 1-wire bus driver;\n  - AFS file system;\n  - BTRFS file system;\n  - Ceph distributed file system;\n  - eCrypt file system;\n  - File systems infrastructure;\n  - Ext4 file system;\n  - F2FS file system;\n  - FUSE (File system in Userspace);\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - OCFS2 file system;\n  - OrangeFS file system;\n  - SMB network file system;\n  - UBI file system;\n  - Drivers core;\n  - Tracing infrastructure;\n  - KProbes tracing;\n  - Networking core;\n  - Netfilter;\n  - Sun RPC protocol;\n  - IPv6 networking;\n  - Bluetooth subsystem;\n  - IPv4 networking;\n  - IP tunnels definitions;\n  - SCTP protocol;\n  - User-space API (UAPI);\n  - IPC subsystem;\n  - Audit subsystem;\n  - BPF subsystem;\n  - DMA mapping infrastructure;\n  - Kernel futex primitives;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Memory management;\n  - 6LoWPAN network protocol;\n  - IEEE 802 network protocols;\n  - B.A.T.M.A.N. meshing protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Ceph Core library;\n  - Devlink API;\n  - HSR network protocol;\n  - IEEE802154.4 network protocol;\n  - IUCV driver;\n  - MAC80211 subsystem;\n  - Management Component Transport Protocol (MCTP);\n  - MultiProtocol Label Switching driver;\n  - Multipath TCP;\n  - NetLabel subsystem;\n  - Open vSwitch;\n  - Packet sockets;\n  - RDS protocol;\n  - Network traffic control;\n  - SMC sockets;\n  - Network sockets;\n  - VMware vSockets driver;\n  - XFRM subsystem;\n  - AppArmor security module;\n  - Key management;\n  - Landlock security;\n  - Simplified Mandatory Access Control Kernel framework;\n  - ALSA framework;\n  - Digigram PCXHR ALSA driver;\n  - Wolfson Microelectronics audio codecs;\n  - USB sound devices;\n  - KVM subsystem;\n(CVE-2024-40954, CVE-2025-38261, CVE-2025-68296, CVE-2025-68730,\nCVE-2025-68768, CVE-2026-23346, CVE-2026-43219, CVE-2026-43240,\nCVE-2026-43311, CVE-2026-43331, CVE-2026-45930, CVE-2026-52913,\nCVE-2026-52930, CVE-2026-52939, CVE-2026-52944, CVE-2026-52948,\nCVE-2026-52953, CVE-2026-53080, CVE-2026-53134, CVE-2026-53135,\nCVE-2026-53140, CVE-2026-53144, CVE-2026-53150, CVE-2026-53154,\nCVE-2026-53158, CVE-2026-53168, CVE-2026-53177, CVE-2026-53178,\nCVE-2026-53179, CVE-2026-53181, CVE-2026-53190, CVE-2026-53208,\nCVE-2026-53210, CVE-2026-53213, CVE-2026-53214, CVE-2026-53218,\nCVE-2026-53219, CVE-2026-53220, CVE-2026-53227, CVE-2026-53236,\nCVE-2026-53237, CVE-2026-53238, CVE-2026-53242, CVE-2026-53245,\nCVE-2026-53249, CVE-2026-53251, CVE-2026-53252, CVE-2026-53261,\nCVE-2026-53263, CVE-2026-53265, CVE-2026-53274, CVE-2026-53331,\nCVE-2026-53332, CVE-2026-53336, CVE-2026-53337, CVE-2026-53339,\nCVE-2026-53343, CVE-2026-53345, CVE-2026-53347, CVE-2026-53349,\nCVE-2026-53350, CVE-2026-53352, CVE-2026-53353, CVE-2026-63868,\nCVE-2026-63871, CVE-2026-63876, CVE-2026-63877, CVE-2026-63882,\nCVE-2026-63883, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,\nCVE-2026-63895, CVE-2026-63896, CVE-2026-63897, CVE-2026-63898,\nCVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,\nCVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63908,\nCVE-2026-63928, CVE-2026-63931, CVE-2026-63933, CVE-2026-63934,\nCVE-2026-63943, CVE-2026-63949, CVE-2026-63956, CVE-2026-63957,\nCVE-2026-63958, CVE-2026-63959, CVE-2026-63960, CVE-2026-63961,\nCVE-2026-63964, CVE-2026-63967, CVE-2026-63969, CVE-2026-63973,\nCVE-2026-63990, CVE-2026-63991, CVE-2026-64001, CVE-2026-64006,\nCVE-2026-64012, CVE-2026-64014, CVE-2026-64078, CVE-2026-64090,\nCVE-2026-64094, CVE-2026-64131, CVE-2026-64233, CVE-2026-64234,\nCVE-2026-64240, CVE-2026-64305, CVE-2026-64329, CVE-2026-64330,\nCVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343,\nCVE-2026-64344, CVE-2026-64346, CVE-2026-64348, CVE-2026-64352,\nCVE-2026-64362, CVE-2026-64363, CVE-2026-64365, CVE-2026-64407,\nCVE-2026-64421, CVE-2026-64424, CVE-2026-64433, CVE-2026-64446,\nCVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-74506,\nCVE-2026-80590, CVE-2026-80591, CVE-2026-80593, CVE-2026-80598,\nCVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80603,\nCVE-2026-80609, CVE-2026-80613, CVE-2026-80619, CVE-2026-80622,\nCVE-2026-80628, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,\nCVE-2026-80635, CVE-2026-80637, CVE-2026-80644, CVE-2026-80645,\nCVE-2026-80646, CVE-2026-80649, CVE-2026-80653, CVE-2026-80662,\nCVE-2026-80663, CVE-2026-80664, CVE-2026-80668, CVE-2026-80677,\nCVE-2026-80678, CVE-2026-80680, CVE-2026-80681, CVE-2026-80684,\nCVE-2026-80691, CVE-2026-80692, CVE-2026-80693, CVE-2026-80694,\nCVE-2026-80700, CVE-2026-80702, CVE-2026-80706, CVE-2026-80707,\nCVE-2026-80709, CVE-2026-80710, CVE-2026-80714, CVE-2026-80716,\nCVE-2026-80717, CVE-2026-80718, CVE-2026-80722, CVE-2026-80725,\nCVE-2026-80731, CVE-2026-80732, CVE-2026-80737, CVE-2026-80738,\nCVE-2026-80747, CVE-2026-80752, CVE-2026-80754, CVE-2026-80840,\nCVE-2026-80928, CVE-2026-80931, CVE-2026-80932, CVE-2026-80933,\nCVE-2026-80935, CVE-2026-80937, CVE-2026-80944, CVE-2026-80945,\nCVE-2026-80947, CVE-2026-80952, CVE-2026-80967, CVE-2026-80971,\nCVE-2026-80976, CVE-2026-80977, CVE-2026-80978, CVE-2026-80980,\nCVE-2026-80982, CVE-2026-80987, CVE-2026-80989, CVE-2026-80990,\nCVE-2026-80991, CVE-2026-80992, CVE-2026-80994, CVE-2026-81000,\nCVE-2026-81001, CVE-2026-81002, CVE-2026-81003, CVE-2026-81007,\nCVE-2026-81008, CVE-2026-81011, CVE-2026-81012, CVE-2026-81016,\nCVE-2026-81017, CVE-2026-89440, CVE-2026-89441, CVE-2026-89442,\nCVE-2026-89443, CVE-2026-89448, CVE-2026-89452, CVE-2026-89456,\nCVE-2026-89465, CVE-2026-89466, CVE-2026-89469, CVE-2026-89470,\nCVE-2026-89471, CVE-2026-89472, CVE-2026-89476, CVE-2026-89477,\nCVE-2026-89478, CVE-2026-89479, CVE-2026-89480, CVE-2026-89481,\nCVE-2026-89482, CVE-2026-89483, CVE-2026-89485, CVE-2026-89487,\nCVE-2026-89488, CVE-2026-89489, CVE-2026-89492, CVE-2026-89493,\nCVE-2026-89494, CVE-2026-89495, CVE-2026-89497, CVE-2026-89500,\nCVE-2026-89501, CVE-2026-89502, CVE-2026-89503, CVE-2026-89504,\nCVE-2026-89508, CVE-2026-89510, CVE-2026-89511, CVE-2026-89520,\nCVE-2026-89524, CVE-2026-89526, CVE-2026-89528, CVE-2026-89530,\nCVE-2026-89532, CVE-2026-89533, CVE-2026-89536, CVE-2026-89537,\nCVE-2026-89538, CVE-2026-89540, CVE-2026-89541, CVE-2026-89542,\nCVE-2026-89544, CVE-2026-89545, CVE-2026-89547, CVE-2026-89548,\nCVE-2026-89549, CVE-2026-89550, CVE-2026-89551, CVE-2026-89553,\nCVE-2026-89554, CVE-2026-89555, CVE-2026-89557, CVE-2026-89559,\nCVE-2026-89560, CVE-2026-89561, CVE-2026-89562, CVE-2026-89563,\nCVE-2026-89564, CVE-2026-89569, CVE-2026-89573, CVE-2026-89574,\nCVE-2026-89579, CVE-2026-89580, CVE-2026-89583, CVE-2026-89585,\nCVE-2026-89586, CVE-2026-89587, CVE-2026-89594, CVE-2026-89596,\nCVE-2026-89597, CVE-2026-89599, CVE-2026-89601, CVE-2026-89605,\nCVE-2026-89606, CVE-2026-89607, CVE-2026-89608, CVE-2026-89609,\nCVE-2026-89615, CVE-2026-89616, CVE-2026-89617, CVE-2026-89622,\nCVE-2026-89626, CVE-2026-89631, CVE-2026-89633, CVE-2026-89634,\nCVE-2026-89636, CVE-2026-89637, CVE-2026-89638, CVE-2026-89640,\nCVE-2026-89643, CVE-2026-89647, CVE-2026-89648, CVE-2026-89649,\nCVE-2026-89650, CVE-2026-89652, CVE-2026-89653, CVE-2026-89654,\nCVE-2026-89655, CVE-2026-89656, CVE-2026-89657, CVE-2026-89659,\nCVE-2026-89662, CVE-2026-89663, CVE-2026-89665, CVE-2026-89669,\nCVE-2026-89671, CVE-2026-89672, CVE-2026-89674, CVE-2026-89676,\nCVE-2026-89680, CVE-2026-89682, CVE-2026-89684, CVE-2026-89685,\nCVE-2026-89686, CVE-2026-89690, CVE-2026-89691, CVE-2026-89694,\nCVE-2026-89696, CVE-2026-89697, CVE-2026-89699, CVE-2026-89702,\nCVE-2026-89704, CVE-2026-89705, CVE-2026-89706, CVE-2026-89707,\nCVE-2026-89708, CVE-2026-89709, CVE-2026-89711, CVE-2026-89712,\nCVE-2026-89713, CVE-2026-89720, CVE-2026-89723, CVE-2026-89724,\nCVE-2026-89725, CVE-2026-89729, CVE-2026-89731, CVE-2026-89733,\nCVE-2026-89736, CVE-2026-89738, CVE-2026-89742, CVE-2026-89743,\nCVE-2026-89747, CVE-2026-89750, CVE-2026-89755, CVE-2026-89761,\nCVE-2026-89762, CVE-2026-89763, CVE-2026-89774, CVE-2026-89777,\nCVE-2026-89778, CVE-2026-89779, CVE-2026-89781, CVE-2026-89782,\nCVE-2026-89783, CVE-2026-89786, CVE-2026-89788, CVE-2026-89789,\nCVE-2026-89792, CVE-2026-89793, CVE-2026-89795, CVE-2026-89799,\nCVE-2026-89801, CVE-2026-89803, CVE-2026-89806, CVE-2026-89808,\nCVE-2026-89810, CVE-2026-89811, CVE-2026-89819, CVE-2026-89823,\nCVE-2026-89832, CVE-2026-89838, CVE-2026-89840, CVE-2026-89844,\nCVE-2026-89846, CVE-2026-89847, CVE-2026-89848, CVE-2026-89849,\nCVE-2026-89854, CVE-2026-89856, CVE-2026-89857, CVE-2026-89860,\nCVE-2026-89861, CVE-2026-89863, CVE-2026-89870, CVE-2026-89877,\nCVE-2026-89880, CVE-2026-89883, CVE-2026-89887, CVE-2026-89888,\nCVE-2026-89890, CVE-2026-89893, CVE-2026-89894, CVE-2026-89897,\nCVE-2026-89899, CVE-2026-89902, CVE-2026-89903, CVE-2026-89908,\nCVE-2026-89912, CVE-2026-89920, CVE-2026-89922, CVE-2026-89927,\nCVE-2026-89929, CVE-2026-89930, CVE-2026-89932, CVE-2026-89938,\nCVE-2026-89951, CVE-2026-89954, CVE-2026-89957, CVE-2026-89959,\nCVE-2026-89960, CVE-2026-89961, CVE-2026-89965, CVE-2026-89968,\nCVE-2026-89969, CVE-2026-89970, CVE-2026-89972, CVE-2026-89973,\nCVE-2026-89979, CVE-2026-89988, CVE-2026-89992, CVE-2026-89995,\nCVE-2026-89997, CVE-2026-89998, CVE-2026-89999, CVE-2026-90000,\nCVE-2026-90002, CVE-2026-90003, CVE-2026-90007, CVE-2026-90011,\nCVE-2026-90013, CVE-2026-90016, CVE-2026-90017, CVE-2026-90018,\nCVE-2026-90022, CVE-2026-90025, CVE-2026-90026, CVE-2026-90027,\nCVE-2026-90032, CVE-2026-90036, CVE-2026-90037, CVE-2026-90041,\nCVE-2026-90042, CVE-2026-90044, CVE-2026-90045, CVE-2026-90048,\nCVE-2026-90049, CVE-2026-90170, CVE-2026-92502, CVE-2026-93221)\n","status":"published","published":"2026-11-06T11:22:23Z","modified":"2026-11-09T12:49:32.205623153Z","updated_at":"2026-11-06T20:50:10.515878Z"}]}}