arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

net: mana: Fix TX CQE error handling

nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()

LoongArch: Set all reserved memblocks on Node#0 at initialization

serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO

drm/amd/display: Wake DMCUB before sending a command

arm64: errata: Add Cortex-A520 speculative unprivileged load workaround

bpf: Fix accesses to uninit stack slots

dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes and crash because of a missing check for struct dm_ioctl.target_count.

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily e.g. leading to a denial of service (network is unreachable errors) when IPv6 packets are sent in a loop via a raw socket.

Chromium: CVE-2023-5218 Use after free in Site Isolation