mlxsw: spectrum: Guard against invalid local ports

drm/amdkfd: svm range restore work deadlock when process exit

drm/sprd: fix potential NULL dereference

x86/mce: Work around an erratum on fast string copy instructions

ath11k: Fix frames flush failure caused by deadlock

clk: mediatek: Fix memory leaks on probe

drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw

ice: arfs: fix use-after-free when freeing @rx_cpu_rmap

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

A vulnerability was found in zstd v1.4.10 where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

powerpc/bpf/32: Fix Oops on tail call tests

drm/amdgpu: fix use-after-free during gpu recovery

drm/amd/display: fix array index out of bound error in DCN32 DML

netfilter: flowtable_offload: fix using __this_cpu_add in preemptible

drm/i915/gt: Cleanup partial engine discovery failures

drm/vmwgfx: Remove rcu locks from user resources

drm/vrr: Set VRR capable prop only if it is attached to connector

ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()

A flaw was found in libXpm. When processing files with .Z or .gz extensions the library calls external programs to compress and uncompress files relying on the PATH environment variable to find these programs which could allow a malicious user to execute other programs by manipulating the PATH environment variable.