Linux kernel.

KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified

• Linux kernel

KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it

• Linux kernel

KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state

• Linux kernel

KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy

• Linux kernel

KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

• Linux kernel

KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN

• Linux kernel

KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded

• Linux kernel

KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

• Linux kernel

KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

• Linux kernel

wifi: cw1200: fix TX padding OOB read leaking heap data to device

• Linux kernel

wifi: iwlegacy: 3945: free EEPROM data on remove

• Linux kernel

wifi: mac80211: count only matching reservations in reserved switch

• Linux kernel

wifi: mac80211: keep paired old chanctx alive

• Linux kernel

wifi: mac80211: shut down RX BA session timer on teardown

• Linux kernel

wifi: mac80211: drain PS delivery work during station teardown

• Linux kernel

wifi: mac80211: account proxy paths against the mesh path limit

• Linux kernel

wifi: mac80211: keep fallback association elements alive

• Linux kernel

wifi: mac80211: minstrel_ht: validate fixed rate index

• Linux kernel

wifi: mac80211: reject invalid 320 MHz CSA bandwidth

• Linux kernel

wifi: mac80211: release mesh path quota on failed additions

• Linux kernel

wifi: mac80211: set info->band for 802.3 encap offload frames

• Linux kernel

wifi: mac80211: fix mesh fast xmit path deletion UAF

• Linux kernel

wifi: mac80211: handle empty FILS association request payload

• Linux kernel

USB: serial: fix dynamic id driver deregistration race

• Linux kernel

USB: serial: fix driver deregistration order

• Linux kernel

USB: serial: fix ioctl hangup race

• Linux kernel

thunderbolt: Fix KASAN reported use-after-free when request is canceled

• Linux kernel

thunderbolt: Hold a router reference for each allocated HopID

• Linux kernel

thunderbolt: Make the DP tunnel activation callback mandatory

• Linux kernel

thunderbolt: Tear down inactive DP tunnels when the domain is stopped

• Linux kernel

thunderbolt: Fix domain reference leak when DPRX read is canceled

• Linux kernel

thunderbolt: Don't access a DP tunnel after its DPRX read was canceled

• Linux kernel

thunderbolt: Fix NULL dereference in tb_remove_work()

• Linux kernel

thunderbolt: Reject oversized XDomain properties responses

• Linux kernel

smb: client: discard post-EOF pagecache when extending a file via zero range

• Linux kernel

smb: client: discard post-EOF pagecache when extending a file via clone range

• Linux kernel

smb: client: flush and commit data before querying allocated ranges

• Linux kernel

smb: client: flush dirty data before zeroing a range

• Linux kernel

smb: client: drain and invalidate before server-side copy/clone

• Linux kernel

smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

• Linux kernel

iio: accel: kionix-kx022a: Prevent memory leak and fix state

• Linux kernel

iio: accel: kxcjk-1013: reject duplicate event disable

• Linux kernel

iio: adc: ad4030: fix invalid oversampling_ratio validation

• Linux kernel

iio: adc: ad_sigma_delta: fix use-after-free on unbind

• Linux kernel

iio: adc: ade9000: fix NULL pointer dereference in clkout registration

• Linux kernel

iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

• Linux kernel

iio: adc: adi-axi-adc: Initialize state mutex

• Linux kernel

iio: adc: pac1934: check ACPI label duplication

• Linux kernel

iio: adc: stm32-adc: fix possible division by zero in processed channel

• Linux kernel

iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

• Linux kernel

iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

• Linux kernel

iio: buffer: serialize buffer teardown with mode claims

• Linux kernel

iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

• Linux kernel

iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data

• Linux kernel

iio: gyro: adis16136: fix unprotected debugfs reads

• Linux kernel

iio: health: max30102: fix NULL dereference in interrupt handler

• Linux kernel

iio: imu: adis16400: fix unprotected debugfs reads

• Linux kernel

iio: imu: adis16480: fix unprotected debugfs reads

• Linux kernel

iio: light: gp2ap020a00f: drain irq_work after free_irq

• Linux kernel

iio: light: rohm-bu27034: Fix infinite delay on error

• Linux kernel