Linux kernel.

netfilter: ipset: mark the rcu locked areas properly

• Linux kernel

drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized

• Linux kernel

ksmbd: don't hold ci->m_lock while waiting for a lease break ack

• Linux kernel

thunderbolt: Keep the domain reference while processing hotplug

• Linux kernel

net/mlx5: HWS, Handle destroying table that has a miss table

• Linux kernel

drm/amd/ras: reset CPER ring on corrupt entry size

• Linux kernel

firmware: arm_scmi: Validate SENSOR_UPDATE payload size

• Linux kernel

firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size

• Linux kernel

wifi: mac80211: validate deauth frame length before reason access

• Linux kernel

wifi: libertas: reject short monitor TX frames

• Linux kernel

wifi: iwlwifi: mvm: fix sched scan IE sizing

• Linux kernel

arm64: kprobes: Allow reentering kprobes while single-stepping

• Linux kernel

wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO

• Linux kernel

drm/gma500: return errors from Oaktrail HDMI I2C reads

• Linux kernel

ima: return error early if file xattr cannot be changed

• Linux kernel

mmc: core: Add validation for host-provided max_segs

• Linux kernel

serial: 8250_port: recognize UPIO_AU

• Linux kernel

media: chips-media: wave5: Add range checks for dec_output_info

• Linux kernel

net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()

• Linux kernel

ntfs3: handle set_blocksize failures

• Linux kernel

isofs: handle set_blocksize failures

• Linux kernel

irqchip/gic-v5: Immediately exec priority drop following activate

• Linux kernel

irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed

• Linux kernel

host1x: bus: Fix missing ops null check in error teardown

• Linux kernel

drm/nouveau/gsp: add SEC2 to GA100 chip table

• Linux kernel

wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect

• Linux kernel

netfilter: nf_conntrack_expect: zero at allocation time

• Linux kernel

freevxfs: don't BUG() on unknown typed-extent type

• Linux kernel

crypto: ccp - Fix possible deadlock in SEV init failure path

• Linux kernel

ksmbd: remove stale channels from all sessions on teardown

• Linux kernel

Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

• Linux kernel

bpf: Infer zext_dst based on static register liveness analysis

• Linux kernel

dm-pcache: reject a kset that overruns its segment

• Linux kernel

dm-pcache: bound the logical key offset from persistent memory

• Linux kernel

sched/cache: Introduce task_struct->sched_cache_grp to fix UAF

• Linux kernel

sched_ext: Don't run ops.dequeue() with a DSQ lock held

• Linux kernel

sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task

• Linux kernel

KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails

• Linux kernel

audit: fix exe mark UAF in kill_rules()

• Linux kernel

fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()

• Linux kernel

HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

• Linux kernel

HID: multitouch: stop the release timer from being rearmed on remove

• Linux kernel

io_uring: fix task_work add use-after-free with SQPOLL

• Linux kernel

ipvs: bound LBLCR and LBLC cache growth

• Linux kernel

kprobes: Skip disarmed probes when checking optkprobe overlap

• Linux kernel

of/overlay: put property on deadprops only after changeset add succeeds

• Linux kernel

of/overlay: only treat a positive changeset id as registered

• Linux kernel

net: gso: limit recursive IP-in-IP segmentation

• Linux kernel

net: extend IPv6 exthdr detection of tunneled packets

• Linux kernel

netfilter: nft_flow_offload: drop flowtable reference on init error path

• Linux kernel

net/packet: prevent TX_RING byte count overflow

• Linux kernel

pfcp: fix socket lifetime on netdevice registration failure

• Linux kernel

rtc: ac100: Assign .num before accessing .hws

• Linux kernel

rtc: spear: initialize IRQ state before requesting alarm IRQ

• Linux kernel

sctp: check RCV_SHUTDOWN after the sendmsg connect wait

• Linux kernel

tpm: Disable TPM on null key name mismatch

• Linux kernel

netfs: clear post-EOF pagecache when extending a file via write

• Linux kernel

netfs: zero gaps in read-gaps folio to avoid writing back stale data

• Linux kernel

module: fix lost error code from codetag_load_module()

• Linux kernel

virt: vmgenid: set driver_data before registering notification handlers

• Linux kernel