* CVE-2022-50093 - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} * CVE-2026-31778 - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} * CVE-2026-43011 - net/x25: Fix potential double free of skb {CVE-2026-43011} * CVE-2026-31602 - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} * CVE-2026-31622 - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622} * CVE-2026-31583 - media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583} * CVE-2026-31659 - batman-adv: reject oversized global TT response buffers {CVE-2026-31659} * CVE-2023-53596 - drivers: base: Free devm resources when unregistering a {CVE-2023-53596} * CVE-2026-31696 - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696} * CVE-2022-50497 - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} * CVE-2026-23372 - nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372} * CVE-2026-23193 - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} * CVE-2023-53619 - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} * CVE-2023-53285 - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} * CVE-2026-43427 - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} * CVE-2026-43052 - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} * CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405} * CVE-2026-31629 - nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629} * CVE-2025-71136 - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() {CVE-2025-71136} * CVE-2026-31417 - net/x25: Fix overflow when accumulating packets {CVE-2026-31417} * CVE-2026-43020 - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} * CVE-2026-43040 - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} * CVE-2022-49770 - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} * CVE-2026-43283 - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283} * CVE-2026-31748 - comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748} * CVE-2026-31747 - comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747} * CVE-2026-31576 - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() {CVE-2026-31576} * CVE-2026-31399 - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} * CVE-2026-23388 - Squashfs: check metadata block offset is within range {CVE-2026-23388} * CVE-2026-43450 - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} * CVE-2026-31720 - usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720} * CVE-2026-23216 - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} * Bump ABI 4.4.0-283