Newer bugs come first
Check the index hasn't changed after writing the cmp entry.
Fix a locking issue in the IPPROTO_SCTP level SCTP_PEER_ADDR_THLDS socket
Fix a locking bug in the IPPROTO_SCTP level SCTP_EVENT socket option.
Fix locking for IPPROTO_SCTP level SCTP_DEFAULT_PRINFO socket option.
Fix an off-by-one error in the input validation of the SCTP_RESET_STREAMS socketoption.
Limit the user-controllable amount of memory the kernel allocates via IPPROTO_SCTP level socket options.
Fix getsockopt() for IP_OPTIONS/IP_RETOPTS.
Avoid overfow in vtruncbuf()
Limit option_len for the TCP_CCALGOOPT.
Correct vm_fault_copy_entry() handling of backing file truncation after the file mapping was wired.
In vm_fault_copy_entry(), we should not assert that entry is charged if the dst_object is not of swap type.
Handle a guest executing a vm instruction by trapping and raising an undefined instruction exception.
disallow clock_settime too far in the future to avoid panic
Fix parsing error when processing cmsg in SCTP send calls.