* Bump kernel ABI to 32: ship the ELS kernel as 4.19.0-32-*, distinct from the prior 4.19.0-31. * CVE-2021-4037 - xfs: fix up non-directory creation in SGID directories {CVE-2021-4037} - fs: add mode_strip_sgid() helper {CVE-2021-4037} - fs: move S_ISGID stripping into the vfs_*() helpers {CVE-2021-4037} * CVE-2026-53176 - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN {CVE-2026-53176} * CVE-2026-90103 - NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103} * CVE-2026-90203 - Squashfs: check block offset is not negative {CVE-2026-90203} * CVE-2026-90223 - nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223} * CVE-2026-90225 - nfc: llcp: read llcp_sock->local under the socket lock in getsockopt {CVE-2026-90225} * CVE-2026-90382 - wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382} * CVE-2026-90413 - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} * CVE-2026-90435 - RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435} * CVE-2026-92498 - wifi: ath6kl: avoid buffer overreads in WMI event handlers {CVE-2026-92498} * CVE-2026-93054 - uio: Fix stale info pointer in failed registration path {CVE-2026-93054} * CVE-2026-93104 - RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104} * CVE-2026-93262 - md/raid5-ppl: fix use-after-free in ppl_do_flush() {CVE-2026-93262} * CVE-2026-93803 - wifi: libipw: fix key index receive bound checks {CVE-2026-93803} * CVE-2026-93820 - PCI: rockchip: Protect root bus removal with rescan lock {CVE-2026-93820} * CVE-2026-97408 - Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408} * CVE-2026-97427 - drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427} * CVE-2026-97448 - ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448} * CVE-2026-97509 - thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509} * CVE-2026-97539 - usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539} * CVE-2026-97564 - smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564} * CVE-2026-97596 - ipvs: reject invalid states in connection template sync records {CVE-2026-97596} * CVE-2026-97908 - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev {CVE-2026-97908} * CVE-2026-97940 - ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940} * CVE-2026-98077 - netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077} * CVE-2026-98096 - ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096} * CVE-2026-98348 - wifi: libipw: reject too-short association responses {CVE-2026-98348} * CVE-2026-98357 - IB/isert: wait for deferred control PDU completions before releasing the connection {CVE-2026-98357} * CVE-2026-98432 - ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432} * Miscellaneous upstream changes - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport