* CVE-2021-38198 - ELSCVE-686: KVM: MMU: return page fault error code from permission_fault - ELSCVE-686: kvm: x86: MMU support for EPT accessed/dirty bits - ELSCVE-686: KVM: nVMX: fix EPT permissions as reported in exit qualification - ELSCVE-686: KVM: X86: MMU: Use the correct inherited permissions to get shadow page * CVE-2021-3655 - ELSCVE-715: sctp: add size validation when walking chunks - ELSCVE-715: sctp: add param size validation for SCTP_PARAM_SET_PRIMARY - ELSCVE-715: sctp: validate chunk size in __rcv_asconf_lookup - ELSCVE-715: sctp: validate from_addr_param return - ELSCVE-715: sctp: fix return value check in __sctp_rcv_asconf_lookup * CVE-2021-3428 - ELSCVE-1704: ext4: don't allow overlapping system zones - ELSCVE-1704: ext4: check journal inode extents more carefully * CVE-2021-38205 - ELSCVE-389: net: xilinx_emaclite: Do not print real IOMEM pointer * CVE-2021-28688 - ELSCVE-670: xen-blkback: don't leak persistent grants from xen_blkbk_map() * CVE-2021-34693 - ELSCVE-668: can: bcm: fix infoleak in struct bcm_msg_head * CVE-2020-25673 - ELSCVE-819: nfc: Avoid endless loops caused by repeated llcp_sock_connect() * CVE-2021-23134 - ELSCVE-620: net/nfc: fix use-after-free llcp_sock_bind/connect * CVE-2021-3573 - ELSCVE-846: Bluetooth: use correct lock to prevent UAF of hdev object * CVE-2021-38204 - ELSCVE-457: usb: max-3421: Prevent corruption of freed memory * CVE-2021-42008 - ELSCVE-1730: net: 6pack: fix slab-out-of-bounds in decode_data * CVE-2020-36385 - ELSCVE-1181: RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy