- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785} - powerpc/rtas: avoid device tree lookups in rtas_os_term() {CVE-2022-50870} - svcrdma: Reject connection when transport allocation fails {CVE-2026-89531} - Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept {CVE-2026-80819} - sctp: reject stale cookies with mismatched verification tags {CVE-2026-80890} - ipvs: use parsed transport offset in TCP state lookup {CVE-2026-80875} - USB: serial: option: fix slab OOB read in interrupt URB callback {CVE-2026-80827} - ipv4: reject undersized MTUs in ip_do_fragment() {CVE-2026-80793} - HID: core: fix OOB read of field->usage in hid_set_field() {CVE-2026-80781} - af_packet: Don't send zero-byte data in tpacket_snd(). {CVE-2026-80742} - ALSA: dummy: Check card index validity at probe {CVE-2026-80812} - params: fix charp corruption on allocation failure {CVE-2026-89552} - selinux: reject a class permission count below its inherited common {CVE-2026-80757} - selinux: reject a permission value exceeding the class permission count {CVE-2026-80755} - USB: serial: safe_serial: fix memory corruption with small endpoint {CVE-2026-63957} - rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814} - power: supply: max17040: propagate register read errors {CVE-2026-89462} - mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974} - xfrm: ah6: validate routing header segments_left {CVE-2026-80844} - nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops {CVE-2026-89666} - dccp: fix data-race around dp->dccps_mss_cache {CVE-2023-53839} - media: av7110: fix a spectre vulnerability {CVE-2024-50289} - virtio_console: eliminate anonymous module_init & module_exit {CVE-2022-49100} - vt: prevent kernel-infoleak in con_font_get() {CVE-2024-50076} - ext2: Add sanity checks for group and filesystem size {CVE-2022-50815} - mtd: Fix device name leak when register device failed in add_mtd_device() {CVE-2022-50566} - hwrng: amd - Fix PCI device refcount leak {CVE-2022-50868} - media: dvb-frontends: fix leak of memory fw {CVE-2022-50664} - vlan: require the MAC header to be present in __vlan_insert_inner_tag() {CVE-2026-98377} - acct: fix potential integer overflow in encode_comp_t() {CVE-2022-50749}