Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Out-of-bounds read in HTTP client no_proxy handling

net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

net: rose: include node references in rose_neigh refcount

NFS: Fix the setting of capabilities when automounting a new filesystem

block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

soc: qcom: mdt_loader: Ensure we don't read past the ELF header

jbd2: prevent softlockup in jbd2_log_do_checkpoint()

net: bridge: fix soft lockup in br_multicast_query_expired()

net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

fs: Prevent file descriptor table allocations exceeding INT_MAX

x86/vmscape: Add conditional IBPB mitigation

serial: 8250: fix panic due to PSLVERR

vsock/virtio: Validate length in packet header before skb_put()

net, hsr: reject HSR frame if skb can't hold tag

x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper

gve: prevent ethtool ops after shutdown

netfilter: nf_reject: don't leak dst refcount for loopback packets

netlink: avoid infinite retry looping in netlink_unicast()

net: usb: asix_devices: add phy_mask for ax88772 mdio bus

netfilter: ctnetlink: fix refcount leak on table dump

ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr

pNFS: Fix uninited ptr deref in block/scsi layout

eventpoll: Fix semi-unbounded recursion

mptcp: make fallback action and fallback decision atomic

perf/x86/intel: Fix crash in icl_update_topdown_event()

net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

fs: relax assertions on failure to encode file handles

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

NFS: Fix a race when updating an existing write

ppp: fix race conditions in ppp_fill_forward_path

mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function