iavf: fix off-by-one issues in iavf_config_rss_reg()

RDMA/cm: Fix leaking the multicast GID table reference

drm/ttm: Avoid NULL pointer deref for evicted BOs

Bluetooth: btusb: revert use of devm_kzalloc in btusb

ASoC: stm32: sai: fix OF node leak on probe

net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write

powerpc/64s/slb: Fix SLB multihit issue during SLB preload

tpm: Cap the number of PCR banks

scsi: aic94xx: fix use-after-free in device removal path

functionfs: fix the open/removal races

Input: lkkbd - disable pending work before freeing device

shmem: fix recovery on rename failures

f2fs: invalidate dentry cache on failed whiteout creation

svcrdma: bound check rq_pages index in inline path

ntfs: set dummy blocksize to read boot_block when mounting

net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

f2fs: fix to avoid potential deadlock

net: hns3: using the num_tqps in the vf driver to apply for resources

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.