- Rebase to Amazon Linux 2 kernel-5.10.270-271.1109.amzn2 patch line and upstream stable 5.10.272 - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432} - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - xfrm: fix stale skb->prev after async crypto steals a GSO segment {CVE-2026-68426} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111} - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109} - SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550} - SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537} - libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956} - netpoll: fix a use-after-free on shutdown path {CVE-2026-64424} - ip: orphan prefetched skbs before multicast forwarding {CVE-2026-89564} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266} - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - loop: Fix use-after-free issues {CVE-2023-53111} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap {CVE-2021-47200} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - xfrm: Don't clobber inner headers when already set {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}