- block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - parport: Proper fix for array out-of-bounds access {CVE-2024-50074} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - bpf: Fix out of bounds access for ringbuf helpers {CVE-2021-4204} - bpf: Generally fix helper register offset check {CVE-2021-4204} - bpf: Generalize check_ctx_reg for reuse with other types {CVE-2021-4204} - bpf: Make context access check generic {CVE-2021-4204} - gso: do not skip outer ip header in case of ipip and net_failover {CVE-2022-48936} - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() {CVE-2022-48702}