CVE-2026-64529

crypto: qat - remove unused character device and IOCTLs...

CVE-2026-64527

drm/hyperv: validate VMBus packet size in receive callback...

CVE-2026-64528

tty: serial: samsung: Remove redundant port lock acquisition in rx helpers...

CVE-2026-64526

ethtool: tsconfig: fix missing ethnlopscomplete...

CVE-2026-64525

xfrm: move policybydst RCU sync from per-netns .exit to .preexit...

CVE-2026-64524

drm/hyperv: validate resolutioncount and fix WIN8 fallback...

CVE-2026-64523

net/handshake: Take a long-lived file reference at submit...

CVE-2026-64522

net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA...

CVE-2026-64520

firmware: armffa: Bound PARTITIONINFOGETREGS copies...

CVE-2026-64521

pinctrl: meson: amlogic-a4: fix deadlock issue...

CVE-2026-64519

NFSD: Fix infinite loop in layout state revocation...

CVE-2026-64518

tcp: Fix out-of-bounds access for twsk in tcpaoestablishedkey...

CVE-2026-64516

drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets...

CVE-2026-64517

drm/xe/gsc: Fix double-free of managed BO in error path...

CVE-2026-64515

wifi: mac80211: fix MLE defragmentation...

CVE-2026-64513

KVM: x86: Unconditionally recompute CR8 intercept on PPR update...

CVE-2026-64514

userfaultfd: gate mustwait writability check on ptepresent...

CVE-2026-64512

ACPI: CPPC: Suppress UBSAN warning caused by field misuse...

CVE-2026-64510

ACPI: NFIT: core: Fix acpinfitinit error cleanup...

CVE-2026-64511

ACPI: NFIT: core: Fix possible NULL pointer dereference...

CVE-2026-64509

rust: block: fix GenDisk cleanup paths...

CVE-2026-64507

x86/bugs: Enable IBPB flush on BPF JIT allocation...

CVE-2026-64508

bpf: Support for hardening against JIT spraying...

CVE-2026-64506

wifi: rtw89: correct drop logic for malformed AMPDU frames...

CVE-2026-64505

usb: gadget: function: rndis: add length check for header...

CVE-2026-64503

iio: accel: kxsd9: fix runtime PM imbalance on writeraw error...

CVE-2026-64504

iio: accel: bmc150: clamp the device-reported FIFO frame count...

CVE-2026-64502

iio: adc: adsigmadelta: fix clearpendingevent for registerless devices...

CVE-2026-64500

iio: adc: lpc32xx: Initialize completion before requesting IRQ...

CVE-2026-64501

iio: adc: adsigmadelta: fix CS held asserted and state leaks...

CVE-2026-64499

iio: adc: ti-ads1119: fix PM reference leak in buffer preenable...

CVE-2026-64498

iio: buffer: hw-consumer: free scanmask on buffer release...

CVE-2026-64496

iio: event: Fix event FIFO reset race...

CVE-2026-64497

iio: chemical: scd30: Cleanup initializations and fix sign-extension bug...

CVE-2026-64495

iio: gyro: bmg160: bail out when bandwidth/filter is not in table...

CVE-2026-64493

iio: pressure: mpl115: fix runtime PM leak on read error...

CVE-2026-64494

iio: light: gp2ap002: fix runtime PM leak on read error...

CVE-2026-64492

iio: temperature: tmp006: use devmiiotriggerregister...

CVE-2026-64491

ALSA: usx2y: us144mkii: fix work UAF on disconnect...

CVE-2026-64489

ALSA: ymfpci: check sndctlnew1 return value...

CVE-2026-64490

ALSA: virtio: Validate control metadata from the device...

CVE-2026-64488

ALSA: aoa: check sndctlnew1 return value...

CVE-2026-64487

ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser...

CVE-2026-64485

ALSA: compress: Fix task creation error unwind...

CVE-2026-64486

ALSA: cmipci: check sndctlnew1 return value...

CVE-2026-64484

ALSA: es1938: check sndctlnew1 return value...

CVE-2026-64482

ALSA: gus: check sndctlnew1 return value...

CVE-2026-64483

ALSA: firewire: isight: bound the sample count to the packet payload...

CVE-2026-64481

ALSA: hda/cs35l41: Fix firmware load work teardown...

CVE-2026-64479

ALSA: seq: Fix uninitialised heap leak in sndseqeventdup...