- KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113} - x86/efi: defer freeing of boot services memory {CVE-2026-23352} - RDMA/irdma: Cap MSIX used to online CPUs + 1 {CVE-2023-53811} - i2c: smbus: fix NULL function pointer dereference {CVE-2024-35984} - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs {CVE-2024-50048} - net: hsr: avoid potential out-of-bound access in fill_frame_info() {CVE-2024-56648} - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() {CVE-2024-56539} - sched/core: Prevent rescheduling when interrupts are disabled {CVE-2024-58090} - net: bcmgenet: Use stronger register read/writes to assure ordering {CVE-2022-49194} - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n {CVE-2026-23439} - xsk: Fix race condition in AF_XDP generic RX path {CVE-2025-37920} - idpf: check error for register_netdev() on init {CVE-2025-22116} - bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911} - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. {CVE-2025-23143} - can: isotp: sanitize CAN ID checks in isotp_bind() {CVE-2022-49269} - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399} - net/smc: Reset connection when trying to use SMCRv2 fails. {CVE-2023-53382} - Revert "ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211}"