CVEs affecting projects tracked on Release Alert, from NVD & OSV.
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.