[5.4.17-2136.323.8.2.el7] - netfilter: nfnetlink_osf: avoid OOB read [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count [Orabug: 35824307] - netfilter: xt_u32: validate user space input [Orabug: 35824307] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c [Orabug: 35824307] {CVE-2023-42753}