Linux kernel.

mailbox: qcom-cpucp: handle NULL data in send_data callback

• Linux kernel

mailbox: riscv-sbi-mpxy: validate RPMI notification lengths

• Linux kernel

null_blk: use DEFINE_MUTEX for the file-scope mutex

• Linux kernel

null_blk: register configfs subsystem after creating default devices

• Linux kernel

null_blk: free global tag_set on init error path

• Linux kernel

null_blk: free zones array on device power-off

• Linux kernel

null_blk: reject per-device queue resize for shared tag set

• Linux kernel

null_blk: serialize configfs attribute stores with the lock

• Linux kernel

null_blk: serialize configfs attribute updates with device setup

• Linux kernel

blk-iolatency: clear delay state when freeing policy data

• Linux kernel

blk-iocost: clear delay state when freeing policy data

• Linux kernel

ublk: avoid teardown retry loop on xarray allocation failure

• Linux kernel

block: mtip32xx: synchronize ioctls with device removal

• Linux kernel

apparmor: fix deadlock in complain-mode change_hat

• Linux kernel

hwmon: (coretemp) Fix core_data leak on CPUs without PTS

• Linux kernel

bpf: Check pointer type for all atomic RMW paths

• Linux kernel

ksmbd: Do not skip lock checks for single-byte ranges

• Linux kernel

smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer

• Linux kernel

ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()

• Linux kernel

smb: smbdirect: free completion queues with ib_free_cq()

• Linux kernel

smb: smbdirect: destroy QP before mem pools on accept failure

• Linux kernel

smb: smbdirect: release pending child sockets outside the handler lock

• Linux kernel

ksmbd: validate ipc response length before dereferencing its fields

• Linux kernel

ksmbd: free preauth sessions on connection teardown

• Linux kernel

ksmbd: serialize oplock close with pending break ownership

• Linux kernel

smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

• Linux kernel

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

• Linux kernel

smb/server: abort initialization when proc setup fails

• Linux kernel

smb/server: call ksmbd_proc_cleanup() on module init failure

• Linux kernel

ksmbd: defer publishing granted locks to prevent UAF/double-free race

• Linux kernel

erofs: fix interlaced ztailpacking pclusters

• Linux kernel

lwt_bpf: Restore reserved headroom after xmit program

• Linux kernel

bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks

• Linux kernel

m68k: nfcon: Do not call console_is_registered() in nfcon_device()

• Linux kernel

bpf: Reject negative optlen in cgroup getsockopt hook

• Linux kernel

ksmbd: safely discard unregistered deferred locks

• Linux kernel

ksmbd: detach blocked lock requests before freeing

• Linux kernel

ksmbd: scope session state changes to bound connections

• Linux kernel

ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size

• Linux kernel

smb/server: fix session leak in ksmbd_session_register()

• Linux kernel

NFSv4: remove callback IDR entry on client allocation failure

• Linux kernel

pnfs/blocklayout: Fix device leaks on parse failure

• Linux kernel

NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers

• Linux kernel

NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()

• Linux kernel

clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()

• Linux kernel

bpf, xdp: move offload check into dev_xdp_install()

• Linux kernel

hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed

• Linux kernel

dpll: fix NULL deref in dpll_device_ops() during teardown race

• Linux kernel

net: kcm: Hold RCU read lock while running BPF parser

• Linux kernel

virtio_net: Fix resize of the RX ring

• Linux kernel

ipvs: fix integer overflow in ftp helper port/address parsing

• Linux kernel

cuse: wait for pending RCU callbacks on module exit

• Linux kernel

fuse: check for NULL root inode in fuse_fill_super_submount

• Linux kernel

vsock: don't check the listener's sk_err in vsock_accept()

• Linux kernel

platform/x86: hp-bioscfg: fix password encoding bounds check

• Linux kernel

platform/x86/amd/hsmp: Reject negative power cap writes in hwmon

• Linux kernel

net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()

• Linux kernel

ntfs: fix kmap_local_page() usage in compress

• Linux kernel

ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()

• Linux kernel

ntfs: reject unprivileged writes to reserved $LX* xattrs

• Linux kernel