Linux kernel.

net: thunderbolt: Mark the connection down when bringing it up fails

• Linux kernel

NTB: ntb_transport: Fail TX enqueue when the QP link is down

• Linux kernel

NTB: ntb_transport: Reject oversized TX buffers

• Linux kernel

net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages

• Linux kernel

net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry

• Linux kernel

net/smc: do not dereference an unset send buffer on the SMC-D teardown path

• Linux kernel

net/smc: fix socket refcount leak in smc_switch_conns()

• Linux kernel

net/smc: fix use-after-free in smc_rx_pipe_buf_release()

• Linux kernel

net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()

• Linux kernel

net/smc: stop killed, freed and out_of_sync sharing a byte

• Linux kernel

net/smc: unregister the connection before draining the rx tasklet

• Linux kernel

net: cap advertised IP tunnel headroom

• Linux kernel

net: skbuff: don't touch shared zerocopy state in skb_tx_error()

• Linux kernel

seg6: reset IP6CB after IPv6 decapsulation

• Linux kernel

mfd: qnap-mcu: keep the reply buffer alive past a command timeout

• Linux kernel

mfd: sm501: Fix potential memory leaks during remove

• Linux kernel

ALSA: 6fire: bound the MIDI event length from the device

• Linux kernel

ALSA: aloop: Check card index validity at probe

• Linux kernel

ALSA: bcd2000: clear the URB pointers on disconnect

• Linux kernel

ALSA: FCP: do not copy out an uninitialised init response

• Linux kernel

ALSA: mpu401: Check card index validity at probe

• Linux kernel

ALSA: mts64: Check card index validity at probe

• Linux kernel

ALSA: pcxhr: initialize mutexes before requesting threaded IRQ

• Linux kernel

ALSA: portman2x4: Check card index validity at probe

• Linux kernel

ALSA: serial-u16550: Check card index validity at probe

• Linux kernel

ALSA: virmidi: Check card index validity at probe

• Linux kernel

dm-stats: fix a crash if allocation of per-cpu data fails

• Linux kernel

dm-pcache: validate geometry fields from on-disk cache_info

• Linux kernel

dm-pcache: validate kset key_num and intra-segment bounds

• Linux kernel

dm-pcache: validate on-media seg_num against the cache device size

• Linux kernel

dm-pcache: bound the persisted tail-position offset

• Linux kernel

dm-pcache: clamp the tail kset read to the segment data region

• Linux kernel

dm-pcache: detect a cycle in the last-kset chain during replay

• Linux kernel

dm-pcache: only hand out initialized cache segments

• Linux kernel

dm-pcache: fix use-after-free and invalid seg operations in kset_replay()

• Linux kernel

i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()

• Linux kernel

i3c: master: adi: initialize the lock before enabling interrupts

• Linux kernel

i3c: master: Fix info leak and UAF in device unregister path

• Linux kernel

i3c: master: svc: bound IBI payload to the requested max_payload_len

• Linux kernel

i3c: renesas: Check that the transfer is valid before accessing it

• Linux kernel

wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()

• Linux kernel

wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()

• Linux kernel

wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop

• Linux kernel

fuse: copy request headers via a stack buffer for io-uring

• Linux kernel

crypto: iaa - unmap dst before software fallback on decompress

• Linux kernel

wifi: mwifiex: Detach sync cmd buffer on interrupted wait

• Linux kernel

wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids

• Linux kernel

wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()

• Linux kernel

wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()

• Linux kernel

wifi: rtw88: pci: fix resource leak on failed NAPI setup

• Linux kernel

wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot

• Linux kernel

wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex

• Linux kernel

wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy

• Linux kernel

wifi: mt76: mt7925: cancel mlo_pm_work on stop

• Linux kernel

wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy

• Linux kernel

wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames

• Linux kernel

wifi: mt76: mt7996: validate default EEPROM firmware size

• Linux kernel

vsock/virtio: flush works in dependency order

• Linux kernel

w1: ds28e17: reject an oversize length on an I2C block read

• Linux kernel

tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout

• Linux kernel