Linux kernel.

bpf: Disallow interpreter fallback for arena-related insns

• Linux kernel

bpf: Disallow interpreter fallback for gotox insn

• Linux kernel

dmaengine: dw-edma: Terminate all descriptors without callbacks

• Linux kernel

dmaengine: dw-edma: Serialize abort state updates

• Linux kernel

dmaengine: dw-edma: Serialize channel state checks

• Linux kernel

ASoC: meson: Keep link pointers valid on realloc failure

• Linux kernel

iio: dac: ad5686: missing NULL check on match data

• Linux kernel

RDMA/hfi1: Propagate sdma_txinit_ahg() errors

• Linux kernel

RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]

• Linux kernel

irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

• Linux kernel

RDMA/nldev: validate dynamic counter attribute length

• Linux kernel

ACPI: processor: validate MADT IOAPIC entry bounds

• Linux kernel

ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root

• Linux kernel

bpf: Zero queue and stack outputs on lock failure

• Linux kernel

riscv, bpf: Fix memory leak in bpf_jit_free

• Linux kernel

riscv, bpf: Fix kernel stack corruption in tailcall with CFI

• Linux kernel

bpf, riscv: Fix extable handling for arena load_acquire

• Linux kernel

bpf: Fix offset warn check for bpf_res_spin_lock

• Linux kernel

bpf: Preserve unique-field state across nested structs

• Linux kernel

RDMA/erdma: Fix CEQ tasklet use-after-free on removal

• Linux kernel

RDMA/mana_ib: drain QP references after partial table insertion

• Linux kernel

RDMA/core: Fix use after free in ib_query_qp()

• Linux kernel

RDMA/core: Fix potential use after free in ib_destroy_cq_user()

• Linux kernel

RDMA/core: Fix potential use after free in ib_destroy_srq_user()

• Linux kernel

RDMA/core: Fix potential use after free in counter_release()

• Linux kernel

RDMA/core: Fix potential use after free in ib_free_cq()

• Linux kernel

RDMA/core: Fix potential use after free in ib_dealloc_pd_user()

• Linux kernel

firmware: arm_scmi: Fix requested device removal race

• Linux kernel

iommu/amd: Fix undefined behavior in devid_write debugfs function

• Linux kernel

thermal: intel: int3400: clean up ODVP on probe failures

• Linux kernel

ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()

• Linux kernel

ext4: clear stale xarray tags on folios skipped during writeback

• Linux kernel

ext4: drain in-flight DIO before buffered write fallback

• Linux kernel

ext4: use fsdata to track inline data write state and fix race

• Linux kernel

ext4: validate readdir offset before accessing dirent

• Linux kernel

wifi: ath6kl: avoid buffer overreads in WMI event handlers

• Linux kernel

wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()

• Linux kernel

wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()

• Linux kernel

RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap

• Linux kernel

ext4: fix buffer_head leak in ext4_init_orphan_info

• Linux kernel

cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active

• Linux kernel

cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks

• Linux kernel

firmware: arm_scmi: Roll back partial protocol table registration

• Linux kernel

firmware: arm_scmi: Unrequest devices if driver registration fails

• Linux kernel

xfrm: Fix skb double-free in xfrm_dev_direct_output()

• Linux kernel

RDMA/erdma: complete object teardown when the destroy command fails

• Linux kernel

exfat: fix valid_size extension over a shared writable mapping

• Linux kernel

bpf: Fix CFI mismatch in task work callback

• Linux kernel

bpf: Fix WARNING in bpf_tracing_link_release

• Linux kernel

cxl/region: Fix use-after-free in find_pos_and_ways() error path

• Linux kernel

liveupdate: Remember FLB retrieve() status

• Linux kernel

pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip

• Linux kernel

pinctrl: mediatek: free EINT resources on unbind

• Linux kernel

scsi: ufs: core: Validate string descriptors

• Linux kernel

scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags

• Linux kernel

scsi: ufs: core: Validate connected lane counts

• Linux kernel

scsi: ufs: debugfs: Reserve space for a string terminator

• Linux kernel

crypto: keembay - Initialize completion before requesting IRQ

• Linux kernel

RDMA/mlx5: Fix integer overflow of user QP buffer size

• Linux kernel

isofs: release zisofs block pointer buffer head

• Linux kernel