Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Timing side-channel in SM2 algorithm on 64 bit ARM

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0)

Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

Out-of-bounds read in HTTP client no_proxy handling

tee: fix NULL pointer dereference in tee_shm_put

net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

ax25: properly unshare skbs in ax25_kiss_rcv()

ppp: fix memory leak in pad_compress_skb

pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()

x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

mm: move page table sync declarations to linux/pgtable.h

mm: slub: avoid wake up kswapd in set_track_prepare

ocfs2: prevent release journal inode after journal shutdown

cifs: prevent NULL pointer dereference in UTF16 conversion

net: rose: include node references in rose_neigh refcount

fs/smb: Fix inconsistent refcnt update

sctp: initialize more fields in sctp_v6_from_sk()

HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()

usb: dwc3: Remove WARN_ON for device endpoint command timeouts

btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()

NFS: Fix the setting of capabilities when automounting a new filesystem

block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

ARM: tegra: Use I/O memcpy to write to IRAM

soc: qcom: mdt_loader: Ensure we don't read past the ELF header

jbd2: prevent softlockup in jbd2_log_do_checkpoint()

net: bridge: fix soft lockup in br_multicast_query_expired()

drm/hisilicon/hibmc: fix the hibmc loaded failed bug

net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

fs: Prevent file descriptor table allocations exceeding INT_MAX

ARM: rockchip: fix kernel hang during smp initialization

RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()

mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()

mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock

x86/vmscape: Add conditional IBPB mitigation

serial: 8250: fix panic due to PSLVERR

vsock/virtio: Validate length in packet header before skb_put()

parisc: Revise __get_user() to probe user read access

parisc: Revise gateway LWS calls to probe user read access

media: usbtv: Lock resolution while streaming

media: venus: protect against spurious interrupts during probe

drm/amdkfd: Destroy KFD debugfs after destroy KFD wq

net, hsr: reject HSR frame if skb can't hold tag

s390/sclp: Fix SCCB present check

drm/amd/display: Avoid a NULL pointer dereference

smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()

comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()