Linux kernel.

net: appletalk: fix NULL pointer dereference in aarp_send_ddp()

• Linux kernel

f2fs: embed f2fs_gc_kthread in f2fs_sb_info

• Linux kernel

drm/pagemap: dma-unmap pages before handling migration errors

• Linux kernel

i3c: master: Fix device_register() error path

• Linux kernel

ksmbd: fix maximum allowed access checks

• Linux kernel

wifi: rtw89: fix HE extended capability length check

• Linux kernel

greybus: audio: bound the topology section sizes against the fetched size

• Linux kernel

staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

• Linux kernel

staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

• Linux kernel

RDMA/bnxt_re: Validate udata before executing commands

• Linux kernel

phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator

• Linux kernel

perf/x86/intel/pt: Fix stop/start with no update

• Linux kernel

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

• Linux kernel

regulator: tps6594: Fix device node reference leaks in multiphase loop

• Linux kernel

remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

• Linux kernel

wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate

• Linux kernel

bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn

• Linux kernel

ext4: fix circular lock dependency in ext4_ext_migrate

• Linux kernel

ext4: skip extra isize expansion during mount to prevent deadlock

• Linux kernel

RDMA/core: Fix potential use after free in uverbs_free_dmah()

• Linux kernel

arm64: RSI: fix field-spanning write warning in attestation token init

• Linux kernel

PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node

• Linux kernel

RDMA/efa: Fix PBL chunk length computation

• Linux kernel

clk: eswin: Zero-initialize stack-allocated clk_init_data

• Linux kernel

md/raid5-ppl: fix use-after-free in ppl_do_flush()

• Linux kernel

locking/lockdep: Fix NULL pointer dereference in __lock_set_class()

• Linux kernel

powerpc/xive: propagate IPI init errors to prevent use-after-free

• Linux kernel

powerpc/irq: Fix missing r2 clobber in PCREL inline assembly

• Linux kernel

ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()

• Linux kernel

block: handle nogenerate/noverify properly in fs-integrity

• Linux kernel

arm64: hibernate: mask DAIF before restoring hibernated kernel

• Linux kernel

btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock

• Linux kernel

arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit

• Linux kernel

sched/isolation: Defer freeing of cpumask memblock memory to initcall

• Linux kernel

ocfs2: fix circular locking dependency in ocfs2_init_acl()

• Linux kernel

ACPI: bus: Introduce acpi_bus_get_primary_device()

• Linux kernel

vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()

• Linux kernel

spi: amlogic-spisg: Make sure clk_init_data is fully initialized

• Linux kernel

drm/xe: don't WARN on kernel job timeout when device already wedged

• Linux kernel

Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference

• Linux kernel

octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity

• Linux kernel

apparmor: policy_int make sure list heads are initialized before fail path

• Linux kernel

drm/sysfb: simpledrm: Improve stride validation

• Linux kernel

mm/secretmem: properly account locked pages

• Linux kernel

scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

• Linux kernel

memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done

• Linux kernel

memcg: make the v1 soft limit knob inert

• Linux kernel

arm64: mm: Fix the lockless page-table walk in show_pte()

• Linux kernel

s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap

• Linux kernel

LoongArch: Add DIRECT_MAP_PHYSMEM_END definition

• Linux kernel

media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common

• Linux kernel

f2fs: fix to zero post-EOF data when extending file size

• Linux kernel

drm/gud: validate TV mode names before creating enum property

• Linux kernel

drm/nouveau/dmem: fix callocated underflow on large folio split

• Linux kernel

mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages

• Linux kernel

lockd: fix swapped arguments in nlmsvc_match_ip()

• Linux kernel

mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

• Linux kernel

nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry

• Linux kernel

svcrdma: Reject Write/Reply chunks with segcount 0

• Linux kernel

mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn

• Linux kernel