Linux kernel.

tcp: Fix potential UAF in reqsk_timer_handler().

• Linux kernel

sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs

• Linux kernel

drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction

• Linux kernel

ntfs: fix resident conversion in ntfs_new_attr_flags

• Linux kernel

soc/tegra: pmc: Fix uninitialised clock rate

• Linux kernel

x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()

• Linux kernel

gpio: shared: gracefully handle no-device lookup of shared GPIOs

• Linux kernel

dm cache: fix issue with background work locking

• Linux kernel

io_uring/io-wq: don't hide a link from cancellations

• Linux kernel

io_uring: don't flood a cancelling task with task_work

• Linux kernel

io_uring/cancel: rearm local work wake up before sleep

• Linux kernel

Drivers: hv: Avoid infinite retry loop in init_vp_index()

• Linux kernel

printk: Postpone kthread startup

• Linux kernel

pid_namespace: make zap_pid_ns_processes() freezable

• Linux kernel

i2c: xiic: restore non-managed runtime PM to fix clk WARN flood

• Linux kernel

tracing: Do not initialize tracefs work if tracing is disabled

• Linux kernel

tipc: protect node reset trace dump with node lock

• Linux kernel

KEYS: Fix key_reject_and_link() race with keyring restriction

• Linux kernel

pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper

• Linux kernel

ntfs: fix race between fallocate and mmap reads

• Linux kernel

ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()

• Linux kernel

mm/damon/core: error damos_commit_quota_goal() for zero target_value

• Linux kernel

Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn

• Linux kernel

tracing: Hold trace_types_lock when updating modules in persistent instances

• Linux kernel

tracing: Hold trace_types_lock when resetting last boot data from readers

• Linux kernel

tracing: Reject incomplete event filter expressions

• Linux kernel

tracing: Save the event file instead of the compatible histogram

• Linux kernel

tracing: Unregister field variable histograms when the command fails

• Linux kernel

tracing/histograms: Verify event_call identity when updating synth_event refcount

• Linux kernel

tracing/syscalls: Use copy_from_user for the faultable syscall buffer

• Linux kernel

io_uring/waitid: own the request before clearing ->head

• Linux kernel

io_uring/cmd: don't leave list poison in ->hash_node

• Linux kernel

io_uring/wait: don't spin on a stuck overflow list

• Linux kernel

io_uring/io-wq: don't lose the signal that ends work

• Linux kernel

io_uring/waitid: prevent cancel reference wrap

• Linux kernel

keys: Avoid the owner account dereference in named keyring lookup

• Linux kernel

keys: Check the authorization payload in process keyring searches

• Linux kernel

keys: Protect the type name while describing a key

• Linux kernel

keys: make keyring indexes independent of kernel addresses

• Linux kernel

keys: Protect the read method check against type removal

• Linux kernel

keys/trusted_keys: return immediately after TPM unseal failure

• Linux kernel

asymmetric_keys: reject trust keys without IDs

• Linux kernel

ftrace: Initialize modname and offset in print_rec()

• Linux kernel

coredump: hold RCU while releasing parked threads

• Linux kernel

Drivers: hv: Don't reset VMBus connection state on error/exit paths

• Linux kernel

power: supply: core: prevent unregistering a power supply while a callback runs

• Linux kernel

drm/vc4: hdmi: Move packet RAM enable to PM runtime

• Linux kernel

vsock: treat TCP_CLOSING as once-established

• Linux kernel

net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

• Linux kernel

netlink: reset skb headers before unicast and multicast filtering

• Linux kernel

accel/rocket: clear rdev on device init failure

• Linux kernel

drm/xe: skip eviction of a BO with no resource

• Linux kernel

drm/xe/oa: Zero OA buffer at allocation

• Linux kernel

scsi: target: Disable interrupts while holding delayed_cmd_lock

• Linux kernel

scsi: target: iscsi: Fix race in discovery auth updates

• Linux kernel

sched/core: Call wakeup_preempt() for queued tasks during class change

• Linux kernel

ocfs2/dlm: Protect the recovery list during debugfs reads

• Linux kernel

pipe: preserve existing fasync readers on writer setup failure

• Linux kernel

scsi: libsas: Fix SMP IO deadlock during HA resume

• Linux kernel

netlink: avoid hashing the network namespace pointer

• Linux kernel