drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process

drm/amdgpu: remove two invalid BUG_ON()s

crash: fix crashkernel resource shrink

drm/amd/display: Cache streams targeting link when performing LT automation

drm/xe/guc: Add devm release action to safely tear down CT

drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()

HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow

tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

HDF5 H5Centry.c H5C__load_entry resource consumption

media: nxp: imx8-isi: Fix streaming cleanup on release

amd/amdkfd: enhance kfd process check in switch partition

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

Apache Log4j Core: Missing TLS hostname verification in Socket appender

Expr has Denial of Service via Unbounded Recursion in Builtin Functions

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

filelock has TOCTOU race condition that allows symlink attacks during lock file creation

Unexpected session resumption in crypto/tls

Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow