Linux kernel.

bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed

• Linux kernel

bpf: Check load-acquire src ptr type before the load

• Linux kernel

thermal: hwmon: Remove hwmon class device along with its parent

• Linux kernel

RDMA/erdma: Hold CQ references when processing EQ events

• Linux kernel

RDMA/erdma: Hold QP references for AE and CM processing

• Linux kernel

RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ

• Linux kernel

ARM: 9481/2: breakpoint: CFI breakpoints only on demand

• Linux kernel

ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK

• Linux kernel

ARM: 9484/1: enable interrupts when unhandled user faults are triggered

• Linux kernel

ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults

• Linux kernel

ocfs2: synchronize heartbeat callbacks with o2net teardown

• Linux kernel

ocfs2: o2hb: quiesce negotiate handlers and timeout work

• Linux kernel

bpf: Clear buf on error in __bpf_get_task_stack

• Linux kernel

bpf: Fix sleepable check for tracing/lsm prog

• Linux kernel

drm/sun4i: tcon: Drop TCON TOP device reference

• Linux kernel

drm/sun4i: crtc: Propagate layer initialization error

• Linux kernel

cpufreq: imx6q: fix devres accumulation across driver rebind

• Linux kernel

cpufreq: imx6q: fix out-of-bounds write when probed more than once

• Linux kernel

IB/isert: delay the final Login Response until the session is registered

• Linux kernel

IB/isert: post the full-feature receive buffers after session registration

• Linux kernel

RDMA/siw: Fix use-after-free in siw_accept()

• Linux kernel

module/dups: Fix use-after-free in kmod_dup_req lifetime handling

• Linux kernel

arm64: hibernate: Restore DAIF state on error

• Linux kernel

drm/amd/display: Resize MST HDCP per-connector arrays to 32

• Linux kernel

phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure

• Linux kernel

phy: sunplus: fix error handling in sp_uphy_init()

• Linux kernel

drm/amdgpu/gfx6: Use PFP on the compute queues too

• Linux kernel

scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path

• Linux kernel

firmware_loader: do not queue completed sysfs fallback requests

• Linux kernel

hugetlbfs: release subpool on fill_super failure

• Linux kernel

phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend

• Linux kernel

phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend

• Linux kernel

phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend

• Linux kernel

md/raid5: round bitmap stripes with sector division

• Linux kernel

md: wait for behind writes before destroying bitmap

• Linux kernel

md/md-llbitmap: prevent create failure bitmap UAF

• Linux kernel

md/md-llbitmap: stop daemon timer rearm on destroy

• Linux kernel

md/raid1: don't set array_frozen in raid1_takeover()

• Linux kernel

coresight: etm4x: fix underflow for usage of (nrseqstate - 1)

• Linux kernel

coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable

• Linux kernel

perf: arm_pmuv3: Zero initialize hw_id branch stack field

• Linux kernel

arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt

• Linux kernel

arm_mpam: Disable driver unbind to avoid UAF

• Linux kernel

bpf: Reject load-acquire from pointers requiring fault protection

• Linux kernel

scsi: sd: Fix error handling in sd_probe() after large pool creation failure

• Linux kernel

scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails

• Linux kernel

btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge

• Linux kernel

btrfs: defrag: fix deadlock between defrag and delalloc space reservation

• Linux kernel

btrfs: always wait for ordered extents to avoid OE races

• Linux kernel

btrfs: check if root is readonly when setting posix acl

• Linux kernel

btrfs: retry verity reads for not-uptodate Merkle folios

• Linux kernel

btrfs: zoned: flush active metadata block group at btree_writepages() start

• Linux kernel

btrfs: zoned: don't clobber the extent buffer when zeroing it out

• Linux kernel

btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()

• Linux kernel

pinctrl: airoha: add missed IRQ resource helpers

• Linux kernel

Bluetooth: virtio_bt: avoid OOB read of build info string

• Linux kernel

Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind

• Linux kernel

Bluetooth: hci_conn: fix the SCO setup context lifetime

• Linux kernel

Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths

• Linux kernel

Bluetooth: MGMT: free the mesh send cancel command when it is cancelled

• Linux kernel