Linux kernel.

drm/msm: RCU-free the scheduler-containing ring and VM objects

• Linux kernel

drm/amdgpu: fix rmmio iounmap skipped on device removal

• Linux kernel

drm/amdgpu: Skip KFD mapping clear before initialization

• Linux kernel

drm/amdkfd: Avoid integer underflow in EOP ring size calculation.

• Linux kernel

drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc

• Linux kernel

smb: client: cancel reconnect work in clean_demultiplex_info()

• Linux kernel

smb: client: fix rlist race and missing initialization

• Linux kernel

smb: client: fix use-after-free of iface in cifs_try_adding_channels()

• Linux kernel

smb: client: fix smbd_connection leak on cifs_get_tcp_session() error

• Linux kernel

smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs

• Linux kernel

smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()

• Linux kernel

smb: client: fix potential OOB read in smb3_enum_snapshots()

• Linux kernel

smb: client: fix reparse buffer bounds in cifs_query_reparse_point()

• Linux kernel

smb: client: fix server->total_read for compound encrypted PDUs

• Linux kernel

drm/ttm: fix swapped-out resources never leaving their bulk_move range

• Linux kernel

KVM: x86/mmu: Check write tracking in all address spaces

• Linux kernel

cgroup: Avoid iteration of dying tasks with zero refcount

• Linux kernel

smb/server: fix tree connection leak in smb2_tree_connect()

• Linux kernel

nvdimm: pmem: keep PREFLUSH before data writes

• Linux kernel

staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()

• Linux kernel

usb: typec: ucsi: unregister debugfs entries on teardown

• Linux kernel

wifi: iwlwifi: mei: pass correct argument to function

• Linux kernel

drm/msm: Recover HW before retire hung submit

• Linux kernel

staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths

• Linux kernel

RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters

• Linux kernel

bpf: Mark bpf_refcount field as unique

• Linux kernel

ext4: fix transaction overflow during writeback

• Linux kernel

ACPI: platform: Use acpi_bus_get_primary_device()

• Linux kernel

net: hsr: free learned nodes on device setup failure

• Linux kernel

netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet

• Linux kernel

wifi: mt76: mt7921: validate CLC firmware records

• Linux kernel

ppp_async: drop the errored frame instead of resetting its headroom

• Linux kernel

EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation

• Linux kernel

drm/virtio: use the DMA API for resource backing on Xen

• Linux kernel

accel/qaic: Address potential out-of-bounds read in resp_worker()

• Linux kernel

nvme-rdma: fix -EIO cleanup order in queue_rq

• Linux kernel

nvme: fix racy access to FDP placement id array

• Linux kernel

nvmet-rdma: fix queue leak when connect backlog is exceeded

• Linux kernel

bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic

• Linux kernel

bpf: Fix BPF_F_CPU validation for sparse CPU IDs

• Linux kernel

bpf: Fix percpu map update indexing with sparse CPU IDs

• Linux kernel

drm/gud: validate GUD_ROTATION_0 is present in supported rotations

• Linux kernel

printk: Don't WARN on kthread_run failure.

• Linux kernel

accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain

• Linux kernel

accel/amdxdna: reject a command chain that carries no commands

• Linux kernel

accel/amdxdna: put the chained BO when its mapping fails

• Linux kernel

accel: ethosu: Don't read the U65 rounding mode as a storage mode

• Linux kernel

drm/cirrus-qemu: Validate BAR0 size during probe

• Linux kernel

ntfs: propagate reparse index insertion failure

• Linux kernel

ntfs: fix kmap_local leak in write_mft_record_nolock() error paths

• Linux kernel

ntfs: only count successfully cleared runs when freeing clusters

• Linux kernel

ntfs: do not mark the volume clean in sync_fs when errors were recorded

• Linux kernel

ntfs: treat any nonzero dio zero-range return as an error

• Linux kernel

ntfs: bound $AttrDef table walk to the loaded table size

• Linux kernel

ntfs: reject invalid sectors_per_cluster in the boot sector

• Linux kernel

bpf: check_cond_jmp_op(): properly infer if register is null

• Linux kernel

ntfs: leave HasEA flag untouched on setxattr failure

• Linux kernel

bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO

• Linux kernel

net: stmmac: fix dma mapping leak in stmmac_tso_xmit()

• Linux kernel

sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START

• Linux kernel