Linux kernel.

tracing: Fix hist trigger timestamps for buffered events

• Linux kernel

tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)

• Linux kernel

tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)

• Linux kernel

cifs: don't update i_size in cifs_do_truncate without a cached handle

• Linux kernel

dm-crypt: fix a tiny race condition in crypt_dec_pending

• Linux kernel

dm-integrity: fix infinite loop on discard with large tag size

• Linux kernel

mac802154: fix data race and NULL deref on local->assoc_dev

• Linux kernel

net/iucv: fix the recvmsg window update

• Linux kernel

xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf

• Linux kernel

xfs: fix capability check in xfs

• Linux kernel

io_uring/cancel: don't spin on local work the task can't run

• Linux kernel

selinux: fix BPF token permission checks

• Linux kernel

sctp: validate chunk length in the inqueue parser

• Linux kernel

page_pool: keep frag_offset aligned for odd-sized requests

• Linux kernel

s390/ctcm: Prevent XID null dereference

• Linux kernel

s390/pai: Handle multiple PMU stop callback invocations

• Linux kernel

s390/pci: Fix leak of uninitialized kernel data in SCLP report

• Linux kernel

vsock/virtio: validate packet source for connected sockets

• Linux kernel

vsock/vmci: validate packet source for connected sockets

• Linux kernel

ipv4: avoid divide by zero in fib_rebalance

• Linux kernel

KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes

• Linux kernel

drm/amdgpu/userq: actually validate userq BOs

• Linux kernel

drm/i915/dmc: Harden DMC firmware payload parsing

• Linux kernel

net: bridge: mcast: don't truncate the port group walk on teardown

• Linux kernel

net: psp: do not inherit the Rx association on clone

• Linux kernel

ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION

• Linux kernel

ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION

• Linux kernel

ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in

• Linux kernel

net/sched: cls_flower: validate mask pointer after nla_next()

• Linux kernel

smb: client: fix data corruption with concurrent writes and O_TRUNC

• Linux kernel

smb: client: fix heap overflow in cifs_do_set_acl()

• Linux kernel

smb: client: reject SetEA requests that do not fit the request buffer

• Linux kernel

ntfs: fix FITRIM range alignment

• Linux kernel

ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize

• Linux kernel

drm/amdgpu: free the userptr ranges when a CS fails after parser_bos

• Linux kernel

sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ

• Linux kernel

sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor

• Linux kernel

workqueue: Fix unbound pool lifetime for pending pwqs

• Linux kernel

ntfs: take invalidate_lock in ntfs_setattr_size()

• Linux kernel

ntfs: move attribute payload before shrinking its record

• Linux kernel

wifi: p54: validate firmware record lengths

• Linux kernel

x86/CPU/AMD: Fix AMD TLBI Erratum #1718

• Linux kernel

dm-integrity: fix buffer overflow in inline mode with large tag size

• Linux kernel

tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()

• Linux kernel

io_uring/register: don't exempt disabled rings from task restrictions

• Linux kernel

drm/vc4: drain the hangcheck timer and works on V3D unbind

• Linux kernel

Bluetooth: btintel_pcie: fix TX descriptor bounds check

• Linux kernel

mm: don't schedule deferred kernel page table freeing while booting

• Linux kernel

riscv: patch: fix handling of bpf-jit execmem addresses

• Linux kernel

Bluetooth: MGMT: Fix status of pending commands flushed on power off

• Linux kernel

drm/amdgpu: serialize vblank counter reads against GPU reset

• Linux kernel

ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM

• Linux kernel

net: openvswitch: validate transport header presence in set_ipv6_addr

• Linux kernel

dm-integrity: fix NULL pointer dereference when the 'R' flag is used

• Linux kernel

dm-integrity: validate the superblock on resume

• Linux kernel

sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler

• Linux kernel

readdir: take no inode lock on an immutable directory

• Linux kernel

ksmbd: fix heap out-of-bounds write in krb5_authenticate()

• Linux kernel

KVM: x86: Use active memslots for the per-vCPU MMIO cache

• Linux kernel

bnxt_en: fix DMA mapping length for padded small packets

• Linux kernel