- net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() {CVE-2025-40170} - ipv4: add RCU protection to ip4_dst_hoplimit() {CVE-2025-40170} - sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383} - packet: use ubuf_info completion for TX_RING packets {CVE-2026-98503} - virtio_net: copy zerocopy frags in start_xmit without NAPI {CVE-2026-98503} - skbuff: Add skb parameter to the ubuf zerocopy callback {CVE-2026-98503} - netfilter: nf_tables: don't queue packet path object notifications {CVE-2026-80837} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state {CVE-2026-93288} - NFSD: check truncate permission under inode lock {CVE-2026-89713} - smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid {CVE-2026-97561} - KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN {CVE-2026-98715} - selinux: check connect-related permissions on TCP Fast Open {CVE-2026-72243} - ovl: check access to copy_file_range source with src mounter creds {CVE-2026-68448} - fs: export rw_verify_area() {CVE-2026-68448} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY {CVE-2026-89676} - NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036} - smb: client: reject SetEA requests that do not fit the request buffer {CVE-2026-99109} - tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) {CVE-2026-99139} - pNFS: Fix a deadlock when returning a delegation during open() {CVE-2026-23050} - smb: client: reject a tree connect response whose byte count is too small {CVE-2026-89631} - inetpeer: randomize RB-tree node comparison using SipHash {CVE-2026-90110} - coredump: hold RCU while releasing parked threads {CVE-2026-99218} - smb: client: bound dirent name against end of SMB response in cifs_filldir {CVE-2026-93787} - btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF {CVE-2026-97415} - tipc: serialize udp bearer replicast list updates {CVE-2026-68323} - NFSv4.1: zero referring call lists before decoding {CVE-2026-90104} - smb: client: validate DFS referral PathConsumed {CVE-2026-68343} - vsock/virtio: validate packet source for connected sockets {CVE-2026-99123} - cifs: validate DFS referral string offsets {CVE-2026-72318} - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs {CVE-2026-72284} - vsock/vmci: validate packet source for connected sockets {CVE-2026-99122} - net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync {CVE-2026-72405} - netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() {CVE-2026-74695} - btrfs: tree-checker: validate INODE_REF's namelen {CVE-2026-93813} - sctp: validate cookie AUTH state before use {CVE-2026-74752} - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246} - NFSD: Prevent client use-after-free during close_lru reaping {CVE-2026-90037} - ext4: fix potential out of bound read in ext4_fc_replay_scan() {CVE-2022-50306} - ext4: factor out ext4_fc_get_tl() {CVE-2022-50306} - ext4: introduce EXT4_FC_TAG_BASE_LEN helper {CVE-2022-50306} - smb: client: clear ce->tgthint in free_tgts() {CVE-2026-89636} - smb: client: harden DFS cache against invalid target hints {CVE-2026-93210} - nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472} - NFSv4: nfs4_do_open() is incorrectly triggering state recovery {CVE-2026-72472} - tty: skip cdev_del() when no cdev is registered {CVE-2026-90335} - net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983} - net: Introduce skb tc depth field to track packet loops {CVE-2026-63983} - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug {CVE-2023-53254} - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254} - cacheinfo: Move cache_leaves_are_shared out of CONFIG_OF {CVE-2023-53254} - net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841} - KVM: x86/mmu: Don't advance iterator after restart due to yielding {CVE-2021-47094} - KVM: x86/mmu: Factor out tdp_iter_return_to_root {CVE-2021-47094} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels {CVE-2026-46099}