@wdormann And that's why you don't cherry pick bugfixes. If the Linux kernel team says they can't tell for sure if a bug might be a security issue, how do Redhat, Debian, Canonical etc. have the hubris to think they are better at that?
My distros kernel was fixed on 11.4.2026, just hours after the kernel team released their fix. I use Arch by the way.