Linux kernel.

power: supply: lp8788-charger: fix use-after-free on remove

• Linux kernel

power: supply: qcom_battmgr: fix use-after-free

• Linux kernel

power: supply: qcom_battmgr: terminate the strings from firmware

• Linux kernel

power: supply: rt9455: quiesce delayed work before teardown

• Linux kernel

power: supply: twl4030_charger: cancel workers via devm

• Linux kernel

power: supply: ucs1002: fix use-after-free on remove

• Linux kernel

power: supply: max17040: propagate register read errors

• Linux kernel

power: supply: max17040: synchronize work cancellation on suspend

• Linux kernel

s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks

• Linux kernel

s390/percpu: Fix MVIY_PERCPU() with older binutils

• Linux kernel

s390/dasd: Do not complete a failed ESE read as successful

• Linux kernel

s390/dasd: Guard sysfs discipline callbacks against unallocated private data

• Linux kernel

s390/dasd: Propagate partial completion length across ERP recovery

• Linux kernel

PCI: plda: Fix use-after-free of event IRQs during teardown

• Linux kernel

PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()

• Linux kernel

iommu/amd: Put PCI device after handling PPR faults

• Linux kernel

iommu/msm: Unwind probe state on registration failure

• Linux kernel

iommu/sva: Set handle->dev before the SVA handle is visible

• Linux kernel

iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field

• Linux kernel

iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add

• Linux kernel

iommu/vt-d: Force requesting ACS when tboot is enabled

• Linux kernel

iommufd: Avoid locking internal accesses during unmap

• Linux kernel

iommufd: Release current IOAS on xa_store() failure

• Linux kernel

iommufd: Fix UAF in selftest IOPF reporting

• Linux kernel

platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer

• Linux kernel

platform/x86: ISST: Validate level in perf mask ioctls

• Linux kernel

platform/x86: ISST: Validate socket ID in clos_assoc ioctl

• Linux kernel

mmc: via-sdmmc: cancel card-detect work on remove

• Linux kernel

mmc: via-sdmmc: stop card-detect handling on probe failure

• Linux kernel

platform/x86: ISST: Add a NULL check for sst_inst[]

• Linux kernel

platform/x86: ISST: Validate logical CPU id and clos id

• Linux kernel

platform/x86: int1092: Fix potential memory leak in sar_probe()

• Linux kernel

platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]

• Linux kernel

platform/x86: think-lmi: Free system certificate signatures

• Linux kernel

platform/chrome: sensorhub: Bound the EC-reported sensor number

• Linux kernel

platform/x86/amd/pmc: Propagate SMU errors and validate S2D address

• Linux kernel

platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails

• Linux kernel

platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()

• Linux kernel

platform/x86: hp-bioscfg: fix heap OOB read on empty password write

• Linux kernel

platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()

• Linux kernel

platform/x86: hp-bioscfg: pass validated element count to package parsers

• Linux kernel

interconnect: Fix use after free in icc_get() and of_icc_get_by_index()

• Linux kernel

ipmi: ipmb: validate write message length

• Linux kernel

ipmi: Remove all sysfs files on registration failure

• Linux kernel

ipmi: si: Fix NULL pointer dereference after failed registration

• Linux kernel

ipmi:msghandler: Cancel work cleanly on an error

• Linux kernel

net/iucv: filter frames in afiucv_hs_rcv() by ingress device

• Linux kernel

xdp: fix zero-copy frame layout

• Linux kernel

slip: fix use-after-free in sl_sync()

• Linux kernel

net: tun: bound receive headroom

• Linux kernel

net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO

• Linux kernel

net: bnxt: ring the doorbell when SW USO exits early

• Linux kernel

net: ipa: fix stalled modem TX queue after runtime resume

• Linux kernel

net: l2tp: do not propagate multicast notification errors

• Linux kernel

net: mctp: hold a reference to the route device in mctp_route_lookup()

• Linux kernel

net: openvswitch: fix flow mask use-after-free on flow deletion

• Linux kernel

net: phylink: correctly validate returned PCS in phylink_inband_caps

• Linux kernel

net: ravb: avoid dereferencing an invalid PTP clock

• Linux kernel

net: ravb: serialize PTP clock teardown

• Linux kernel

net: thunderbolt: Release the Rx HopID that was handed out on mismatch

• Linux kernel