It's important to understand that you can't go by major version numbers in most fixed-release, long term support Linux Operating Systems, like RHEL, Debian, or Ubuntu. There is often deeper investigation needed.

https://access.redhat.com/security/updates/backporting

https://www.redhat.com/en/blog/what-backporting-and-how-does...