- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807} - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available {CVE-2026-64561} - comedi: vmk80xx: fix bulk-buffer overflow {CVE-2021-47474} - staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384} - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit {CVE-2026-23277} - net: mana: fix use-after-free in add_adev() error path {CVE-2026-43056} - dm cache: fix null-deref with concurrent writes in passthrough mode {CVE-2026-53064} - signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() {CVE-2026-53352} - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112} - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589} - ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation {CVE-2026-43133} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233} - Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334} - nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443} - drm/i915/hwmon: Get rid of devm {CVE-2024-39479} - scsi: megaraid_sas: Fix invalid node index {CVE-2025-38239} - vsock: fix buffer size clamping order {CVE-2026-46234} - net: ena: fix shift-out-of-bounds in exponential backoff {CVE-2023-53272}