* CVE-2026-31431 - crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431} - crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431} - crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431} - crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431} - crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431} - crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431} * CVE-2022-49720 - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720} * CVE-2024-49960 - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} * CVE-2025-71086 - net: rose: fix invalid array index in rose_kill_by_device() {CVE-2025-71086} * CVE-2026-23073 - wifi: rsi: Fix memory corruption due to not set vif driver data size {CVE-2026-23073} * CVE-2022-49900 - i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900} * CVE-2022-43945 - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} * Miscellaneous upstream changes - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} - scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075} - tuxcare: update version