[PATCH v2 0/4] Backport CVE fixes to 6.12.y