iommu/vt-d: Fix oops due to out of scope access

i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl

net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove

fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling

ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE

net: skbuff: fix missing zerocopy reference in pskb_carve helpers

netfilter: nf_log: validate MAC header was set before dumping it

net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint

tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

crypto: jitterentropy - replace long-held spinlock with mutex

xfrm: espintcp: do not reuse an in-progress partial send

batman-adv: tvlv: reject oversized TVLV packets

io_uring/poll: fix signed comparison in io_poll_get_ownership()

batman-adv: tp_meter: avoid use of uninit sender vars

ipc/shm: serialize orphan cleanup with shm_nattch updates

Chromium: CVE-2026-5292 Out of bounds read in WebCodecs

sctp: stream: fully roll back denied add-stream state

af_unix: Reject SIOCATMARK on non-stream sockets

netfilter: ebtables: fix OOB read in compat_mtw_from_user

batman-adv: clear current gateway during teardown