Debian Debian Linux 11.0

drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table

x86/sgx: Prevent attempts to reclaim poisoned pages

mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer

net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees

f2fs: vm_unmap_ram() may be called from an invalid context

Revert "fs/ntfs3: Replace inode_trylock with inode_lock"

parisc: Revise __get_user() to probe user read access

drm/amdkfd: Destroy KFD debugfs after destroy KFD wq

parisc: Revise gateway LWS calls to probe user read access

btrfs: fix assertion when building free space tree

kasan: remove kasan_find_vm_area() to prevent possible deadlock

drm/tegra: nvdec: Fix dma_alloc_coherent error check

can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

usb: typec: ucsi: displayport: Fix deadlock

usb: dwc3: Remove WARN_ON for device endpoint command timeouts

mm: move page table sync declarations to linux/pgtable.h

fs/smb: Fix inconsistent refcnt update

btrfs: handle csum tree error with rescue=ibadroots correctly

seg6: Fix validation of nexthop addresses

mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()

mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()

drm/hisilicon/hibmc: fix the hibmc loaded failed bug

net: cadence: macb: Fix a possible deadlock in macb_halt_tx.

usb: typec: displayport: Fix potential deadlock

hfsplus: remove mutex_lock check in hfsplus_free_extents

mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock

jbd2: prevent softlockup in jbd2_log_do_checkpoint()

smb/server: avoid deadlock when linking with ReplaceIfExists

Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

net: bridge: fix soft lockup in br_multicast_query_expired()

ocfs2: fix recursive semaphore deadlock in fiemap call

drm/amdkfd: Don't call mmput from MMU notifier callback

mm: slub: avoid wake up kswapd in set_track_prepare

drm/amd/display: Add null pointer check for get_first_active_display()

hisi_acc_vfio_pci: fix XQE dma address error

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.