[4.1.12-124.75.3] - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg [Orabug: 35354791] {CVE-2023-2248} [4.1.12-124.75.2] - prlimit: do_prlimit needs to have a speculation check [Orabug: 35354303] {CVE-2023-0458} - kernel/sys.c: fix potential Spectre v1 issue [Orabug: 35354303] - xirc2ps_cs: Fix use after free bug in xirc2ps_detach [Orabug: 35250898] {CVE-2023-1670} - net: sched: cbq: dont intepret cls results when asked to drop [Orabug: 34983586] {CVE-2023-23454} [4.1.12-124.75.1] - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer [Orabug: 35312830] {CVE-2023-28328} - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress [Orabug: 35312683] {CVE-2023-2162} - nvme: restrict management ioctls to admin [Orabug: 34619368] {CVE-2022-3169}