tap: add missing verification for short frame

tun: add missing verification for short frame

filelock: fix potential use-after-free in posix_lock_inode

greybus: Fix use-after-free bug in gb_interface_release due

ptp: fix integer overflow in max_vclocks_store

net/dpaa2: Avoid explicit cpumask var allocation on stack

ata: libata-core: Fix double free on error

net: dsa: mv88e6xxx: Correct check for empty list

bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

tcp_metrics: validate source addr length

tcp_metrics: validate source addr length

net: ethernet: lantiq_etop: fix double free in detach

ipv6: annotate some data-races around sk->sk_prot

ipv6: Fix data races around sk->sk_prot.

tcp: Fix data races around icsk->icsk_af_ops.

net: sched: sch_multiq: fix possible OOB write in multiq_tune()

bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

jfs: xattr: fix buffer overflow for invalid xattr

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

netns: Make get_net_ns() handle zero refcount net

block/ioctl: prefer different overflow check

net/sched: Fix UAF when resolving a clash

drm/i915/gt: Fix potential UAF by revoke of fence registers

net/iucv: Avoid explicit cpumask var allocation on stack

nilfs2: add missing check for inode numbers on directory

wifi: mt76: replace skb_put with skb_put_zero

wifi: cfg80211: Lock wiphy in cfg80211_get_station

ima: Avoid blocking in RCU read-side critical section

scsi: qedi: Fix crash while reading debugfs

batman-adv: bypass empty buckets in batadv_purge_orig_ref()

Vendor reverted due to missing fixes a591d35c4023 and a47a7af9b511

netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data transfers

pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

nilfs2: fix inode number range checks

orangefs: fix out-of-bounds fsid access

VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist

scsi: mpi3mr: Sanitise num_phys

vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()

x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD

net/mlx5e: Fix mlx5e_priv_init() cleanup flow

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().

mm: avoid leaving partial pfn mappings around in error case

netdevsim: avoid potential loop in nsim_dev_trap_report_work()

net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

Affects only boot __init stage, already booted kernels are not affected

netfilter: nf_tables: use timestamp to check for set element timeout

netfilter: nf_tables: use timestamp to check for set element timeout

Architecture is not supported

drm/amd/display: Check msg_id before processing transcation

drm/amdkfd: don't allow mapping the MMIO HDP page with large pages

tipc: Return non-zero value from tipc_udp_addr2str() on error

Patched function waits for external events, which may prevent patching/unpatching.

um: line: always fill *error_out in setup_one_line()

usb: dwc3: st: fix probed platform device ref count on probe error path

drm/amdgpu: Fix out-of-bounds write warning

CVE patch is for powerpc arch only

dev/parport: fix the array out-of-bounds risk

ocfs2: cancel dqi_sync_work before freeing oinfo

wifi: ath11k: fix array out-of-bound access in SoC stats

tipc: guard against string buffer overrun

fbdev: pxafb: Fix possible use after free in pxafb_task()

ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free

smb: client: fix OOBs when building SMB2_IOCTL request

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

netfilter: Fix use-after-free in get_info()

nilfs2: fix kernel bug due to missing clearing of checked flag

Issue was backported and fixed in the same 5.15.0-303.168.3.el9uek, previous kernels are not affected

9p: add missing locking around taking dentry fid list

dma-buf: heaps: Fix off-by-one in CMA heap fault handler

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error

aoe: fix the potential use-after-free problem in more places

ALSA: asihpi: Fix potential OOB array access

udf: fix uninit-value use in udf_get_fileshortad

bpf: Fix out-of-bounds write in trie_get_next_key()

net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

kpatch add alt asm definitions

kpatch add paravirt asm definitions