lib/timerqueue: Rely on rbtree semantics for next timer

lib/timerqueue: Rely on rbtree semantics for next timer (adaptation)

hugetlbfs: flush TLBs correctly after huge_pmd_unshare

btrfs: unlock newly allocated extent buffer after error

drm/i915: Flush TLBs before releasing backing store

drm/i915: Flush TLBs before releasing backing store (kpatch adaptation)

stale file descriptors on failed usercopy

NFSv4: Handle case where the lookup of a directory fails

tipc: improve size validations for received domain records

udf: Restore i_lenAlloc when inode expansion fails

udf: Fix NULL ptr deref when converting from inline format

ipv4: avoid using shared IP generator for connected sockets

sr9700: sanity check for packet length

An introduction of required changes through KernelCare could cause unavoidable problems to applications which use unprivileged eBPF.

esp: Fix possible buffer overflow in ESP transformation

Not affected without certain conditions - Secure Boot, configured kgdb/kdb. Complex adaptation

memstick: rtsx_usb_ms: fix UAF

xen/grant-table: add gnttab_try_end_foreign_access()

xen/xenbus: don't let xenbus_grant_ring() remove grants in error case

xen/scsifront: don't use gnttab_query_foreign_access() for mapped status

xen/gntalloc: don't use gnttab_query_foreign_access()

xen/9p: use alloc/free_pages_exact()

ALSA: pcm: Fix races among concurrent read/write and buffer changes

ALSA: pcm: Fix races among concurrent prealloc proc writes

ALSA: pcm: Fix races among concurrent prepare and

ALSA: pcm: Fix races among concurrent hw_params and hw_free

N/A

x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data

floppy: use a statically allocated error counter

floppy: use a statically allocated error counter (kpatch adaptation)

net_sched: cls_route: remove from list when handle is 0

rds: copy_from_user only once per rds_sendmsg system call

scsi: target: Fix WRITE_SAME No Data Buffer crash

af_key: Do not call xfrm_probe_algs in parallel

media: em28xx: initialize refcount before kref_get

proc: avoid integer type confusion in get_proc_long

proc: proc_skip_spaces() shouldn't think it is working on C strings

scsi: stex: Properly zero out the passthrough command structure

mISDN: fix use-after-free bugs in l1oip timer handlers

mISDN: fix use-after-free bugs in l1oip timer handlers (adaptation)

ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

tcp/udp: Fix memory leak in ipv6_renew_options()

Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()

Bluetooth: L2CAP: Fix attempting to access uninitialized memory

Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm

Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM

ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

i2c: ismt: Fix an out-of-bounds bug in ismt_access()

nfp: fix use-after-free in area_cache_get()

net: sched: atm: dont intepret cls results when asked to drop

media: dvb-core: Fix UAF due to refcount races at releasing

Bluetooth: L2CAP: Fix u8 overflow

net: sched: disallow noqueue for qdisc classes

wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid

hv_netvsc: Add check for kvmalloc_array

vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

rds: Fix lack of reentrancy for connection reset with dst addr zero

netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

net/sched: sch_hfsc: Ensure inner classes have fsc curve

Livepatching Retbleed may decrease kernel stability and performance. This vulnerability has medium security impact and applies to certain hardware environments only.

Livepatching Retbleed may decrease the stability and performance of the kernel, while vulnerability has a medium security impact and only for a certain hardware environment.

net: sched: fix race condition in qdisc_graft()

sched/rt: pick_next_rt_entity(): check list_entry

kobject: Fix slab-out-of-bounds in fill_kobj_path()

RDMA/irdma: Prevent zero-length STAG registration

netfilter: nf_tables: Reject tables of unsupported family

netfilter: nf_tables: reject QUEUE/DROP verdict parameters

net/mlx5e: drop shorter ethernet frames

x86/xen: Add xenpv_restore_regs_and_return_to_usermode()

Restrict access to pagemap/kpageflags/kpagecount

N/A

perf: Fix sys_perf_event_open() race against self