- mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition {CVE-2023-53178} - dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - gpio: davinci: Validate the obtained number of IRQs {CVE-2024-42092} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - Bluetooth: hci_sock: Fix not validating setsockopt user input {CVE-2024-35963} - Bluetooth: ISO: Fix not validating setsockopt user input {CVE-2024-35964} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - wifi: mwifiex: avoid possible NULL skb pointer dereference {CVE-2023-53384} - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380} - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343} - thermal: core: prevent potential string overflow {CVE-2023-52868} - drm/amdkfd: Fix shift out-of-bounds issue {CVE-2023-52816} - drm/vkms: Fix null-ptr-deref in vkms_release() {CVE-2022-50369} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail {CVE-2024-40940} - ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - platform/x86: wmi: remove unnecessary initializations - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292} - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() {CVE-2023-53401} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - drm/radeon: possible buffer overflow {CVE-2023-52867} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211_hwsim: Fix possible NULL dereference {CVE-2023-53209} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - wifi: iwlwifi: fw: fix memory leak in debugfs {CVE-2023-53422} - drm/amdgpu: fix memory leak in mes self test {CVE-2023-53370} - skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354} - md/raid10: fix leak of 'r10bio->remaining' for recovery {CVE-2023-53299} - nfsd: call op_release, even when op_func returns an error {CVE-2023-53241} - ppdev: Add an error check in register_device {CVE-2024-36015} - wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2024-26882}