wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead

USB: usbtmc: prevent kernel-usb-infoleak

ocfs2: add bounds checking to ocfs2_xattr_find_entry()

scsi: pm80xx: Set phy->enable_completion only when we wait for it

spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection

drm/amd/display: Avoid overflow from uint32_t to uint8_t

crypto: stm32/cryp - call finalize with bh disabled

Chromium: CVE-2024-4761 Out of bounds write in V8

tranport: TLS host name wildcard matching too lax

XZ Utils on Microsoft Windows platform are vulnerable to argument injection

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Use After Free with SSL_free_buffers

Apache HTTP Server: mod_ssl error log variable escaping

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because in the context of PAM code running as root it mishandles usersfile access such as by calling fchown in the presence of a symlink.

dma-debug: fix a possible deadlock on radix_lock

pinmux: Use sequential access to access desc->pinmux data

Requests vulnerable to .netrc credentials leak via malicious URLs

Redis' Lua library commands may lead to remote code execution

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash