[PATCH 5.15.y 0/2] Backport fix of CVE-2024-37354 to 5.15.y