ftrace: Fix regression with module command in stack_trace_filter

iommu/arm-smmu: Defer probe of clients after smmu device bound

ad7780: fix division by zero in ad7780_write_raw()

mm/slub: Avoid list corruption when removing a slab from the full list

f2fs: fix to drop all discards after creating snapshot on lvm device

iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer

drm/amdgpu: fix usage slab after free

cachefiles: Fix NULL pointer dereference in object->file

hfsplus: don't query the device logical block size multiple times

udmabuf: change folios array from kmalloc to kvmalloc

drm: zynqmp_kms: Unplug DRM device before removal

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.

Buffer overread when using an empty list with SSLContext.set_npn_protocols()

Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()

Jinja has a sandbox breakout through indirect reference to format method

Jinja has a sandbox breakout through malicious filenames

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet

Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)