md: fix resync softlockup when bitmap size is less than array size

netrom: fix possible dead-lock in nr_rt_ioctl()

crypto: bcm - Fix pointer arithmetic

net: openvswitch: fix overwriting ct original tuple for ICMPv6

pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()

net: core: reject skb_copy(_expand) for fraglist GSO skbs

tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets

ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()

rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation

ipv4: check for NULL idev in ip_route_use_hint()

mlxsw: spectrum_acl_tcam: Fix warning during rehash

mlxsw: spectrum_acl_tcam: Fix incorrect list API usage

netfilter: nf_tables: honor table dormant flag from netdev release event path

cpu: Re-enable CPU mitigations by default for !X86 architectures

dma: xilinx_dpdma: Fix locking

i2c: smbus: fix NULL function pointer dereference

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

geneve: fix header validation in geneve[6]_xmit_skb

netfilter: complete validation of user input

net: ena: Fix incorrect descriptor free behavior

tun: limit printing rate when illegal packet received by tun dev

clk: Get runtime PM before walking tree during disable_unused

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

Glib: glib: memory corruption via integer overflow in unicode case conversion

Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64

ext4: fix i_data_sem unlock order in ext4_ind_migrate()

fsnotify: clear PARENT_WATCHED flags lazily

ethtool: check device is present when getting link settings

netpoll: Fix race condition in netpoll_owner_active

ipv6: fix possible race in __fib6_drop_pcpu_from()

bpf: Allow delete from sockmap/sockhash only if update is allowed

af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg

af_unix: Fix garbage collector racing against connect()

tcp_metrics: validate source addr length

mm: avoid overflows in dirty throttling logic

missing SFTP host verification with wolfSSH

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions)

Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

netrc and default credential leak

netrc and redirect credential leak

libxml2 xmlcatalog xmlParseSGMLCatalog recursion

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions)

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data

Libxml2: stack buffer overflow in xmllint interactive shell command handling