scsi: megaraid_sas: return error when create DMA pool failed

net: Set sk_prot_creator when cloning sockets to the right proto

mISDN: enforce CAP_NET_RAW for raw sockets

cfg80211: wext: avoid copying malformed SSIDs

kvm: mmu: ITLB_MULTIHIT mitigation (adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [1/13]

fixed possible memory corruption or privilege escalation for i915 gpu [2/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [3/13]

fixed possible memory corruption or privilege escalation for i915 gpu [4/13]

fixed possible memory corruption or privilege escalation for i915 gpu [5/13]

fixed possible memory corruption or privilege escalation for i915 gpu [6/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [7/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [8/13]

fixed possible memory corruption or privilege escalation for i915 gpu [9/13]

fixed possible memory corruption or privilege escalation for i915 gpu [10/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [11/13] (kcare adaptation)

fixed possible memory corruption or privilege escalation for i915 gpu [12/13] (kcare adaptation)

fixed possible hw level crash if MMIO registers were read while the i915 GPU was in a low-power state [1/2] (kcare adaptation)

fixed possible hw level crash if MMIO registers were read while the i915 GPU was in a low-power state [2/2]

fixed possible memory corruption or privilege escalation for i915 gpu [13/13]

KVM: MMIO: Lock coalesced device when checking for available entry

KVM: coalesced_mmio: add bounds checking

KEYS: Change the name of the dead type to ".dead" to prevent user access

KEYS: Change the name of the dead type to ".dead" to prevent user access (kpatch adaptation)

netfilter: x_tables: fix compat match/target pad out-of-bound write

binfmt_elf: use ELF_ET_DYN_BASE only for PIE

rtlwifi: Fix potential overflow on P2P code

sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output

scsi: iscsi: Restrict sessions and handles to admin capabilities

scsi: iscsi: Verify lengths on passthrough PDU

scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE

tty: Fix ->pgrp locking in tiocspgrp()

af_unix: fix struct pid memory leak

more overflows in marvell wifi driver

RDMA/ucma: Put a lock around every call to the rdma_cm layer

RDMA/ucma: Put a lock around every call to the rdma_cm layer (adaptation)

RDMA/cma: Add missing locking to rdma_accept()

RDMA/ucma: Fix the locking of ctx->file

RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy

bluetooth: eliminate the potential race condition

epoll: Keep a reference on files added to the check list

af_unix: fix garbage collect vs MSG_PEEK

af_unix: fix garbage collect vs MSG_PEEK (adaptation)

xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like

cgroup-v1: Require capabilities to set release_agent

proc: avoid integer type confusion in get_proc_long

proc: proc_skip_spaces() shouldn't think it is working on C strings

x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation

prevent page refcount overflow

Out of scope as the patch is for x86_32 arch only, x86_64 is not affected

not affected without caused-by commit 058504edd026 fs/seq_file: fallback to vmalloc allocation

Mitigation is made with intel firmware update, el8 kernels also need 'i915.enable_guc' specified in cmdline to be affected

futex: Handle faults correctly for PI futexes

futex: Provide and use pi_state_update_owner()

KVM: do not allow mapping valid but non-reference-counted pages

An introduction of required changes through KernelCare could cause unavoidable problems to applications which use unprivileged eBPF.

net/sched: sch_qfq: account for stab overhead in qfq_enqueue

net/sched: cls_fw: Fix improper refcount update leads to use-after-free

net: sched: sch_qfq: Fix UAF in qfq_dequeue()

net: sched: sch_qfq: prevent slab-out-of-bounds in

mm: mempolicy: require at least one nodeid for MPOL_PREFERRED

vhost: Check docket sk_family instead of call getname

Restrict access to pagemap/kpageflags/kpagecount

vmx_vcpu_run wrapper

N/A