netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp

ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

net/sched: cls_flow: fix NULL pointer dereference on shared blocks

net/sched: cls_fw: fix NULL pointer dereference on shared blocks

bridge: mrp: reject zero test interval to avoid OOM panic

net: bonding: fix use-after-free in bond_xmit_broadcast()

netfilter: ipset: drop logically empty buckets in mtype_del

net/x25: Fix overflow when accumulating packets

netfilter: nfnetlink_log: account for netlink header size

netfilter: nf_conntrack_expect: use expect->helper

ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

netfilter: conntrack: add missing netlink policy validations

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

Authenticated query containing a TKEY record may cause named to terminate unexpectedly

Memory leak in code preparing DNSSEC proofs of non-existence

Libsoup: libsoup: authentication bypass via digest authentication replay attack

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion