Linux kernel.

wifi: rtw89: debug: fix off by on in rtw89_ppdu_str()

• Linux kernel

platform/chrome: sensorhub: Fix memory overread in ring handler

• Linux kernel

uprobes/x86: Move optimized uprobe from nop5 to nop10

• Linux kernel

hwrng: core - fix rng list on registration error

• Linux kernel

crypto: qat - cancel work on re-enable SR-IOV timeout

• Linux kernel

crypto: qat - clear AES key schedule from stack

• Linux kernel

crypto: atmel-ecc - reject hardware ECDH without a public key

• Linux kernel

crypto: atmel-sha204a - fix heap info leak on I2C transfer failure

• Linux kernel

crypto: sa2ul - stop probe if context pool creation fails

• Linux kernel

hwrng: xilinx-trng - propagate timeout before any data is read

• Linux kernel

crypto: rk3288 - fail ahash requests on HASH idle timeout

• Linux kernel

crypto: keembay - Fix AEAD unregister count in error path

• Linux kernel

RDMA/irdma: Add refcounting to user ring MRs

• Linux kernel

RDMA/bng_re: return a timeout when firmware responses stall

• Linux kernel

nvme-apple: Use acquire/release for queue enabled state

• Linux kernel

nvmet-rdma: fix response resource leak on queue teardown

• Linux kernel

cgroup/cpuset: Make nr_deadline_tasks an atomic_t

• Linux kernel

wifi: mac80211_hwsim: avoid NULL skb in stop queue drain

• Linux kernel

bpf: Reject MEM_ALLOC BTF accesses past object bounds

• Linux kernel

s390/bpf: Replace ly instruction with llgf

• Linux kernel

time/namespace: Validate nanosecond field in proc_timens_set_offset()

• Linux kernel

clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()

• Linux kernel

bpf: Reject writes through untrusted BTF pointers

• Linux kernel

staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()

• Linux kernel

thermal/drivers/rcar: Fix error checking in probe()

• Linux kernel

usb: gadget: r8a66597: avoid double free of ep0_req in probe error path

• Linux kernel

udf: Mark LVID buffer as uptodate before marking it dirty

• Linux kernel

drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC

• Linux kernel

bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux

• Linux kernel

bpf: Fix use-after-free on mm_struct in bpf_find_vma()

• Linux kernel

bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation

• Linux kernel

bpf: Reject programs with inlined helpers if JIT is not available

• Linux kernel

printk: Fix possible console use-after-free

• Linux kernel

ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep()

• Linux kernel

ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling

• Linux kernel

platform/x86: dell-privacy: Fix race condition

• Linux kernel

platform/x86: dell-wmi-base: Fix resource leak on module load failure

• Linux kernel

platform/x86: dell-wmi-base: Fix handling of ultra performance key

• Linux kernel

platform/x86: lg-laptop: Fix LED resource handling

• Linux kernel

bpf: Drop scalar id on sign-extending narrowing stack fills

• Linux kernel

remoteproc: qcom_q6v5_adsp: Fix reference leak for device node

• Linux kernel

bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max

• Linux kernel

platform/x86: asus-wireless: Fail probe when there is no ACPI match

• Linux kernel

serial: qcom-geni: do not advance stale DMA completions

• Linux kernel

usb: gadget: uac: validate rate list length before storing

• Linux kernel

usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths

• Linux kernel

usb: gadget: configfs: fix out-of-bounds read of qw_sign

• Linux kernel

usb: ljca: bound bank_num in ljca_enumerate_gpio()

• Linux kernel

usb: gadget: aspeed_udc: check endpoint DMA allocation

• Linux kernel

usb: fix UAF when probe runs concurrent to dyn ID removal

• Linux kernel

platform/x86: asus-wmi: fix resource leaks on probe failure

• Linux kernel

platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL

• Linux kernel

platform/surface: acpi-notify: Check ACPI companion before use

• Linux kernel

clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK

• Linux kernel

bpf: Require a BPF cpumask for bpf_cpumask_populate()

• Linux kernel

bpf: Mark tracing_multi trampolines as ftrace managed

• Linux kernel

RDMA/core: Wait for RCU callbacks before unloading ib_core

• Linux kernel

RDMA/mlx5: Drain RCU callbacks during module teardown

• Linux kernel

RDMA/ipoib: Drain RCU callbacks during module teardown

• Linux kernel

RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state

• Linux kernel