- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - netlabel: fix out-of-bounds memory accesses {CVE-2019-25160} - ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - ext4: work around deleting a file with i_nlink == 0 safely {CVE-2019-19447} - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() {CVE-2019-15927} - scsi: libsas: fix a race condition when smp task timeout {CVE-2018-20836} - net: Set sk_prot_creator when cloning sockets to the right proto {CVE-2018-9568} - RDS: Heap OOB write in rds_message_alloc_sgs() {CVE-2018-5332}