vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()

x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD

net/mlx5e: Fix mlx5e_priv_init() cleanup flow

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().

mm: avoid leaving partial pfn mappings around in error case

netdevsim: avoid potential loop in nsim_dev_trap_report_work()

net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

Affects only boot __init stage, already booted kernels are not affected

netfilter: nf_tables: use timestamp to check for set element timeout

netfilter: nf_tables: use timestamp to check for set element timeout

Architecture is not supported

drm/amd/display: Check msg_id before processing transcation

drm/amdkfd: don't allow mapping the MMIO HDP page with large pages

tipc: Return non-zero value from tipc_udp_addr2str() on error

Patched function waits for external events, which may prevent patching/unpatching.

um: line: always fill *error_out in setup_one_line()

usb: dwc3: st: fix probed platform device ref count on probe error path

drm/amdgpu: Fix out-of-bounds write warning

CVE patch is for powerpc arch only

dev/parport: fix the array out-of-bounds risk

ocfs2: cancel dqi_sync_work before freeing oinfo

wifi: ath11k: fix array out-of-bound access in SoC stats

tipc: guard against string buffer overrun

fbdev: pxafb: Fix possible use after free in pxafb_task()

ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free

smb: client: fix OOBs when building SMB2_IOCTL request

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

netfilter: Fix use-after-free in get_info()

nilfs2: fix kernel bug due to missing clearing of checked flag

Issue was backported and fixed in the same 5.15.0-303.168.3.el9uek, previous kernels are not affected

9p: add missing locking around taking dentry fid list

dma-buf: heaps: Fix off-by-one in CMA heap fault handler

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error

aoe: fix the potential use-after-free problem in more places

ALSA: asihpi: Fix potential OOB array access

udf: fix uninit-value use in udf_get_fileshortad

bpf: Fix out-of-bounds write in trie_get_next_key()

net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

kpatch add alt asm definitions

kpatch add paravirt asm definitions