Linux kernel.

x86/amd_node: Fix potential NULL pointer dereference

• Linux kernel

x86/amd_node: Fix PCI device reference counting in amd_smn_init()

• Linux kernel

x86/mm: Fix user-space data loss with MADV_FREE and THP

• Linux kernel

x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()

• Linux kernel

x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF

• Linux kernel

x86/alternatives: Exclude text poking against change_page_attr()

• Linux kernel

mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race

• Linux kernel

ipv6: fix fib6 walker UAF on seq stop

• Linux kernel

ipmr: account multicast table and route memory

• Linux kernel

reboot: fix cad_pid use-after-free race

• Linux kernel

ftrace: fork: Initialize function graph state before copy_exec_state()

• Linux kernel

tracing: Fix memory corruption from the histogram stacktrace modifier

• Linux kernel

tracing: Set the trace clock before registering the histogram trigger

• Linux kernel

tracing: Fix memory corruption from a "STACKTRACE" histogram key

• Linux kernel

tracing: Take trace_array reference when opening a tracer options file

• Linux kernel

tracing: Don't dereference trace_event_file in deferred trigger free

• Linux kernel

ALSA: us122l: Prevent write upgrades for read mappings

• Linux kernel

ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf

• Linux kernel

ALSA: usbusx2y: validate URB actual_length in interrupt callback

• Linux kernel

drm/amdgpu: skip the VMID 0 flush for VRAM

• Linux kernel

ufs: create the root dentry after loading cylinder metadata

• Linux kernel

ufs: validate cylinder group metadata before caching it

• Linux kernel

tick/broadcast: Plug clockevents replacement race

• Linux kernel

tracing/user_events: Don't destroy fields when event removal fails

• Linux kernel

tracing: Free histogram the var ref when its initialization fails

• Linux kernel

tracing: Free histogram var refs regardless of how often they are referenced

• Linux kernel

tracing: Free histogram the field rejected for a bad modifier

• Linux kernel

tracing: Keep the entry count when the histogram stats allocation fails

• Linux kernel

tracing: Take the reference before publishing the named histogram trigger

• Linux kernel

tracing: Undo the registration when enabling the histogram trigger fails

• Linux kernel

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

• Linux kernel

accel/ivpu: Validate firmware log buffer metadata

• Linux kernel

accel/ivpu: Limit firmware log name prints to field size

• Linux kernel

accel: ethosu: Fix ethosu_job_open() return value

• Linux kernel

accel: ethosu: Ensure cmd stream ends with a stop op

• Linux kernel

accel: ethosu: Ensure SRAM size is 0 on mapping failure

• Linux kernel

accel: ethosu: Ensure SRAM region size matches job

• Linux kernel

ASoC: sprd: validate compress buffer sizes against fixed allocations

• Linux kernel

ASoC: sti: initialize IRQ lock before requesting IRQ

• Linux kernel

Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev

• Linux kernel

Bluetooth: btrtl: Don't leak return code when parsing firmware format v2

• Linux kernel

bootconfig: Fix integer overflow in initrd size check

• Linux kernel

cpufreq: zero-initialize policy cpumask before sysfs publication

• Linux kernel

cpufreq: initialize policy rwsem before sysfs publication

• Linux kernel

exit: hold a reference to thread_pid across proc_flush_pid

• Linux kernel

fs: don't return -EINVAL for successful nested thaw

• Linux kernel

genetlink: pin family module during policy dump

• Linux kernel

drm/drm_exec: fix up contended obj when num_objects is 0

• Linux kernel

drm/i915: Fix memory leak in query_perf_config_list()

• Linux kernel

drm/rockchip: analogix_dp: fix unchecked bound endpoint name length

• Linux kernel

drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches

• Linux kernel

io_uring/rw: end write accounting from ->ki_complete

• Linux kernel

ring-buffer: Check resize_disabled before publishing the new subbuf order

• Linux kernel

net/sched: act_api: release all action references on NEWACTION failure

• Linux kernel

net: bridge: use option bits for CFM/MRP frame handlers

• Linux kernel

net: dsa: tag_brcm: legacy FCS: request needed tailroom

• Linux kernel

net: mana: Reserve extra CQ slot for the fence completion CQE

• Linux kernel

net: mpls: clear inner_protocol when the last label is popped

• Linux kernel

net: openvswitch: fix use-after-free of the flow table mask array

• Linux kernel

netfs: Fix uninitialized return value in netfs_unbuffered_write()

• Linux kernel