Linux kernel.

spi: oc-tiny: switch to managed controller allocation

• Linux kernel

sched_ext: Abort directly from the hardlockup handler

• Linux kernel

remoteproc: Prevent crash handling to race with rproc_del()

• Linux kernel

iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized

• Linux kernel

iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init

• Linux kernel

iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs

• Linux kernel

iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()

• Linux kernel

iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs

• Linux kernel

iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID

• Linux kernel

iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path

• Linux kernel

RDMA/rxe: Fix UAF in ODP init error-handling path

• Linux kernel

clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path

• Linux kernel

PCI: Fix UAF when probe runs concurrent to dyn ID removal

• Linux kernel

nilfs2: fix infinite loop in nilfs_clean_segments()

• Linux kernel

nilfs2: prevent out-of-bounds read in super root block parsing

• Linux kernel

nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch

• Linux kernel

RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()

• Linux kernel

RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs

• Linux kernel

RDMA/cxgb4: free STAG index when TPT entry write fails

• Linux kernel

IB/isert: reject PDUs declaring more data than was received

• Linux kernel

IB/isert: reject login PDUs declaring more data than was received

• Linux kernel

nvmet: fix return status of RMI log page on allocation failure

• Linux kernel

nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request

• Linux kernel

spi: davinci: switch to managed controller allocation

• Linux kernel

drm/panthor: Add vm_bind region with kbo range overlap check

• Linux kernel

wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()

• Linux kernel

wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()

• Linux kernel

media: qcom: iris: handle runtime PM resume failure in core deinit

• Linux kernel

media: stm32: dcmi: fix some error handling bugs in probe()

• Linux kernel

platform/chrome: cros_ec_debugfs: Unregister panic notifier

• Linux kernel

wifi: rtlwifi: pci: fix error path in rtl_pci_probe()

• Linux kernel

bus: mhi: host: Fix controller cleanup on EDL sysfs failure

• Linux kernel

md: remove REQ_NOWAIT support from raid1/10/456

• Linux kernel

md: recheck spare changes before starting sync

• Linux kernel

wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()

• Linux kernel

wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()

• Linux kernel

firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published

• Linux kernel

block: fix dio leak on metadata mapping error

• Linux kernel

power: supply: isp1704_charger: cancel work on remove

• Linux kernel

power: supply: sc2731_charger: cancel work on remove

• Linux kernel

bpf: Fix potential UAF in bpf_netns_link_update_prog

• Linux kernel

bpf: Fix potential UAF when reading bpf link info

• Linux kernel

lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone

• Linux kernel

md/bitmap: resume array on backlog_store() error path

• Linux kernel

md: scope memalloc_noio to allocation critical sections

• Linux kernel

iommu/dma: Check atomic pool allocation result directly

• Linux kernel

swiotlb: Preserve allocation virtual address for dynamic pools

• Linux kernel

i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices

• Linux kernel

md/raid1: create serial pool adding rdev to array with serialize_policy=1

• Linux kernel

iomap: release the folio batch on iomap callback failures

• Linux kernel

misc: sgi-gru: remove interrupt-context page-table walks

• Linux kernel

wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length

• Linux kernel

wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()

• Linux kernel

wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete

• Linux kernel

wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash

• Linux kernel

wifi: mt76: mt792x: Fix memory leak in SDIO TX path

• Linux kernel

wifi: mt76: fix RX data queuing of RRO 3.0

• Linux kernel

wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP

• Linux kernel

wifi: mt76: fix non-AQL packet accounting for MLO stations

• Linux kernel

wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]

• Linux kernel