CVE-2026-80865

bpf: Add missing accessok call to copyusersyms...

CVE-2026-80864

RDMA/rxe: Fix responder UAF on IBQPMAXDESTRDATOMIC modifyqp...

CVE-2026-80863

RDMA/rxe: Fix OOB in freerdatomicresources...

CVE-2026-80862

nvme-tcp: fix usage of pagefragcache...

CVE-2026-80861

usb: xhci: bail out of setup if the controller is inaccessible...

CVE-2026-80860

fuse: fix race between interrupt and resend...

CVE-2026-80859

fuse: fix missing barrier when checking io-uring readiness...

CVE-2026-80858

fuse: publish io-uring queues with release semantics...

CVE-2026-80857

fuse: wait for FRFINISHED on abortonkill to prevent use-after-free...

CVE-2026-80856

fuse: fix invalidate lock leak on setattr writeback failure...

CVE-2026-80855

fuse: fix invalidate lock leak on open OTRUNC DAX failure...

CVE-2026-80854

usb: gadget: ftcm: keep port count until LUN teardown completes...

CVE-2026-80853

KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts...

CVE-2026-80852

tls: device: fix out-of-bounds write in tlsappendfrag...

CVE-2026-80851

gtp: serialize PDP context updates...

CVE-2026-80850

tcp: fix AO info use-after-free in tcpaoconnectinit...

CVE-2026-80849

net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer...

CVE-2026-80848

xfrm: espintcp: fix UAF during close...

CVE-2026-80847

tcp: clamp route advmss to TCPMINMSS...

CVE-2026-80846

xfrm: drop ESP-in-TCP packets with no ingress device...

CVE-2026-80845

xfrm: avoid lock inversion in nat keepalive work...

CVE-2026-80844

xfrm: ah6: validate routing header segmentsleft...

CVE-2026-80843

xfrm: fix xfrmstateconstruct auth-trunc leak...

CVE-2026-80842

net: bridge: mcast: fix use-after-free of a master VLAN's multicast context...

CVE-2026-80841

net/packet: defer vmalloc TXRING free until skbs finish...

CVE-2026-80840

ipv6: seg6: clear IPv4 control block on IPIP decapsulation...

CVE-2026-80839

batman-adv: reject unrepresentable multicast TVLV offsets...

CVE-2026-80838

vxlan: keep the last remote linked during FDB flush...

CVE-2026-80837

netfilter: nftables: don't queue packet path object notifications...

CVE-2026-80836

crypto: virtio - bound the akcipher result length...

CVE-2026-80835

crypto: qcom-rng - Remove cryptorng interface...

CVE-2026-80834

crypto: sun8i-ce - Remove cryptorng interface...

CVE-2026-80833

crypto: sun8i-ss - Remove cryptorng interface...

CVE-2026-80832

crypto: qce - fix CCM AAD buffer underallocation...

CVE-2026-80831

crypto: mxs-dcp - fix source scatterlist length access...

CVE-2026-80830

usb: core: Add lock to usbwakeupnotification...

CVE-2026-80829

ALSA: usb-audio: fix OOB write in sndusbmidinovationoutput...

CVE-2026-80828

ALSA: usb-audio: Complete cleanup after system-resume errors...

CVE-2026-80827

USB: serial: option: fix slab OOB read in interrupt URB callback...

CVE-2026-80826

USB: c67x00: fix use-after-free in c67x00addisourb...

CVE-2026-80825

wifi: mt76: mt7925: ensure tx headroom in usbsdiotxprepareskb...

CVE-2026-80824

usb: usbfs: fix use-after-free of usbdevice in usbdevrelease...

CVE-2026-80823

nfc: st21nfca: validate ATRREQ length against the received frame...

CVE-2026-80822

mailbox: mchp-ipc-sbi: Add null check for devmkasprintf...

CVE-2026-80821

nvmet: pci-epf: put CQ ref on createcq mapping failure...

CVE-2026-80820

xfs: don't livelock in scrub on a circular unlinked list...

CVE-2026-80819

Bluetooth: RFCOMM: take rfcommmutex for the deferred setup accept...

CVE-2026-80818

iommu/tegra241-cmdqv: Fix CMDSYNC use-after-free on teardown...

CVE-2026-80817

iommu/iommufd: Fix NULL pointer deref in iommufdioaschangeprocess when racing with ioptmapfilepages...

CVE-2026-80816

ALSA: FCP: Use a private URB for the notification endpoint...