Linux kernel.

net: hisilicon: hisi_femac: Move setting of netops to fix crash

• Linux kernel

net: hisilicon: hip04_eth: Move setting of netops to fix crash

• Linux kernel

net: ethernet: actions: Move setting of netops to fix crash

• Linux kernel

net: mv643xx: move setting of netops to fix crash

• Linux kernel

net: au1000: move setting of netops to fix crash

• Linux kernel

net: ethoc: move setting of netops to fix crash

• Linux kernel

net: ethernet: aeroflex: move setting of netops to fix crash

• Linux kernel

net: ti: icssm-prueth: Move setting of netops to fix crash

• Linux kernel

net: bcmgenet: unshare the skb before writing the control block

• Linux kernel

calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()

• Linux kernel

gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths

• Linux kernel

gpio: mxc: fix race between chained IRQ handler install and probe completion

• Linux kernel

net: stmmac: dwmac1000: clear the RGMII status interrupt

• Linux kernel

perf: Fix perf_pmu_migrate_context() leaving events behind

• Linux kernel

x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()

• Linux kernel

firewire: core: fix race condition in split transaction handling

• Linux kernel

accel/rocket: search every core slot when a core is removed

• Linux kernel

accel/rocket: search every core slot when looking up a scheduler

• Linux kernel

ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture

• Linux kernel

autofs: ignore notification errors from a replaced pipe

• Linux kernel

unicode: free the map after a grace period

• Linux kernel

watch_queue: Fix note pool publication race in watch_queue_set_size()

• Linux kernel

x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context

• Linux kernel

KVM: SEV: Fix page dirtying in sev_gmem_post_populate()

• Linux kernel

KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry

• Linux kernel

fsnotify: prevent mark additions during connector teardown

• Linux kernel

ext4: free the sbi after a grace period

• Linux kernel

eventfs: Free the eventfs_inode after an rcu grace period too

• Linux kernel

ipc: drop the mqueue mount with kern_unmount() on setup failure

• Linux kernel

ntfs3: free the sbi after a grace period

• Linux kernel

namespace: a mount that copy_tree() leaves out can't take over a lock

• Linux kernel

futex: Fix mm reuse handling for FUT_OFF_MMSHARED

• Linux kernel

mshv_vtl: Check per-CPU register page before mmap

• Linux kernel

net/sched: fix use-after-free in __tcf_action_put()

• Linux kernel

net: rds: fix uninitialized trans dereference in CM event handler

• Linux kernel

sctp: revalidate output stream after association connect wait

• Linux kernel

spi: imx: fix slab corruption from undersized DMA bounce buffers

• Linux kernel

tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields

• Linux kernel

gpio: shared: fix use-after-free bug when adding shared proxies

• Linux kernel

i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

• Linux kernel

ring-buffer: Do not show buffer_meta for CPUs without a buffer

• Linux kernel

ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()

• Linux kernel

ring-buffer: Fix false warning in ring_buffer_map_get_reader()

• Linux kernel

scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies

• Linux kernel

scsi: st: Fix use-after-free race between st_remove() and st_open()

• Linux kernel

scsi: xen/scsifront: Check for a NULL shadow entry on a backend response

• Linux kernel

scsi: libiscsi: Reject a negative task index from parse_pdu_itt

• Linux kernel

scsi: libiscsi: Validate the ITT reflected in a Reject PDU

• Linux kernel

scsi: libiscsi: Validate the task named by a management response

• Linux kernel

drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions

• Linux kernel

drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr

• Linux kernel

drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl

• Linux kernel

drm/amdgpu: keep the eviction fence until the last handle is closed

• Linux kernel

drm/exec: don't immediately add prelocked obj to array of locked objs

• Linux kernel

drm/i915/dmc: Add sanity check for DMC load address

• Linux kernel

drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change

• Linux kernel

sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue

• Linux kernel

tracing: Keep the predicate limit separate from program capacity

• Linux kernel

tracing: Check operator stack capacity before pushing

• Linux kernel

tracing: Fix crash in print_graph_function_event()

• Linux kernel