[ Ubuntu: 4.15.0-248.259 ] * CVE-url: https://ubuntu.com/security/CVE-2025-21811 - nilfs2: protect access to buffers with no active references * CVE-url: https://ubuntu.com/security/CVE-2025-21715 - net: davicom: fix UAF in dm9000_drv_remove * CVE-url: https://ubuntu.com/security/CVE-2024-58083 - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() * CVE-url: https://ubuntu.com/security/CVE-2024-57979 - pps: Fix a use-after-free * CVE-url: https://ubuntu.com/security/CVE-2025-21898 - ftrace: Avoid potential division by zero in function_stat_show() * CVE-url: https://ubuntu.com/security/CVE-2025-21993 - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() * CVE-url: https://ubuntu.com/security/CVE-2025-21653 - netlink: add attribute range validation to policy - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute * CVE-url: https://ubuntu.com/security/CVE-2024-53148 - comedi: Flush partial mappings in error case * CVE-url: https://ubuntu.com/security/CVE-2022-49541 - cifs: fix potential double free during failed mount * CVE-url: https://ubuntu.com/security/CVE-2024-35937 - wifi: cfg80211: check A-MSDU format more carefully * CVE-url: https://ubuntu.com/security/CVE-2021-47211 - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc * CVE-url: https://ubuntu.com/security/CVE-2025-21772 - partitions: mac: fix handling of bogus partition table * CVE-url: https://ubuntu.com/security/CVE-2025-21753 - btrfs: fix use-after-free when attempting to join an aborted transaction * CVE-url: https://ubuntu.com/security/CVE-2025-21934 - rapidio: fix an API misues when rio_add_net() fails