- ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - veth: Fix use after free in XDP_REDIRECT {CVE-2023-53107} - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068} - arm64/sve: Discard stale CPU state when handling SVE traps {CVE-2024-50275} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - wifi: mt76: mt7921e: fix use-after-free in free_irq() {CVE-2024-26892} - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read {CVE-2024-58069} - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - net_sched: sch_fifo: implement lockless __fifo_dump() {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - watch_queue: Actually free the watch {CVE-2022-49256} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - netfilter: nf_set_pipapo: fix initial map fill {CVE-2024-57947} - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations {CVE-2021-47098} - aio: fix use-after-free due to missing POLLFREE handling {CVE-2021-47505} - aio: keep poll requests on waitqueue until completed {CVE-2021-47505} - smb: client: fix potential deadlock when releasing mids {CVE-2023-52757} - cifs: remove useless DeleteMidQEntry() {CVE-2023-52757} - media: uvcvideo: Remove dangling pointers {CVE-2024-58002} - media: uvcvideo: Only save async fh if success {CVE-2024-58002} - media: uvcvideo: Refactor iterators {CVE-2024-58002} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array {CVE-2025-21785} - net: rose: fix timer races against user threads {CVE-2025-21718} - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - afs: Increase buffer size in afs_update_volume_status() {CVE-2024-26736} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099}