- vsock: Keep the binding until socket destruction {CVE-2025-21756} - mt76: fix use-after-free by removing a non-RCU wcid pointer {CVE-2022-49328} - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840} - ASoC: core: Fix use-after-free in snd_soc_exit() {CVE-2022-49842} - net: sched: Fix use after free in red_enqueue() {CVE-2022-49921} - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846} - ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892} - dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122} - scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114} - mac80211: fix potential double free on mesh join {CVE-2022-49290} - wifi: mac80211: fix use-after-free in chanctx code {CVE-2022-49416} - ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - tracing: Fix potential double free in create_var_ref() {CVE-2022-49410} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init {CVE-2022-49478} - HID: elan: Fix potential double free in elan_input_configured {CVE-2022-49508} - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621} - drm/amd/pm: fix double free in si_parse_power_table() {CVE-2022-49530} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - net: make sock_inuse_add() available {CVE-2024-53168}