- net: skbuff: propagate shared-frag marker through pskb_copy() - HID: ignore non-functional sensor in HP 5MP Camera {CVE-2025-21992} - net: fix crash when config small gso_max_size/gso_ipv4_max_size {CVE-2024-50258} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() {CVE-2024-53042} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - serial: imx: Add missing .thaw_noirq hook {CVE-2022-49841} - module: ensure that kobject_put() is safe for module type kobjects {CVE-2025-37995} - udf: Fix uninitialized array access for some pathnames {CVE-2023-53165} - ACPICA: Avoid undefined behavior: applying zero offset to null pointer {CVE-2023-53182} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379} - ice: Fix memory leak in ice_set_ringparam() {CVE-2026-23389} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - HID: asus: avoid memory leak in asus_report_fixup() {CVE-2026-31524} - xprtrdma: treat all calls not a bcall when bc_serv is NULL {CVE-2022-49321} - mm/mempolicy: fix uninit-value in mpol_rebind_policy() {CVE-2022-49567} - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails {CVE-2022-49549} - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). {CVE-2022-49344} - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data {CVE-2022-50536} - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() {CVE-2023-53578} - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570} - mptcp: fix race on unaccepted mptcp sockets {CVE-2022-49669} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315} - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - apparmor: Fix double free of ns_name in aa_replace_profiles() {CVE-2026-23408} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - i2c: piix4: Fix a memory leak in the EFCH MMIO support {CVE-2022-49653}