- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266} - net: account for encap headers in qdisc pkt len {CVE-2026-53091} - kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198} - Update to kernel 3.10.0-1160.164.1.el7 - netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116} - netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116} - netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116} - Revert "netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}" - netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266} - sctp: prevent peer transport count overflow {CVE-2026-74469} - xfrm: ah6: validate routing header segments_left {CVE-2026-80844} - i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191} - i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196} - netfilter: nft_rbtree: ignore inactive matching element with no descendants - netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper - net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480} - netfilter: conntrack: check netns when walking expect hash - netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411} - dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} - ipc: limit next_id allocation to the valid ID range {CVE-2026-52923} - macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019} - dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106} - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111} - drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106} - driver core: enforce device_lock for driver_match_device() {CVE-2026-31688} - proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375} - net: tun: bound receive headroom {CVE-2026-81000} - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372} - wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005} - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020} - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083} - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039} - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299} - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234} - tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175} - media: pci: dm1105: Free allocated workqueue {CVE-2026-68218} - IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425} - USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343} - USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340} - bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720} - ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964} - tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}