- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021} - ext4: add strict range checks while freeing blocks {CVE-2022-50021} - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() {CVE-2022-50021} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038} - IB/mlx5: Fix initializing CQ fragments buffer {CVE-2021-47261} - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379} - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664} - KVM: x86/mmu: Don't advance iterator after restart due to yielding {CVE-2021-47094} - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - net: bridge: fix vlan tunnel dst refcnt when egressing {CVE-2021-47222} - iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - net: bridge: fix vlan tunnel dst null pointer dereference {CVE-2021-47222}