Linux kernel.

regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4

• Linux kernel

scsi: ch: Do not keep references to data transfer element devices

• Linux kernel

riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp

• Linux kernel

riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE

• Linux kernel

riscv: futex: untag the user pointer before the atomic access

• Linux kernel

Bluetooth: hci_sock: Serialize dead-device detachment

• Linux kernel

Bluetooth: hci_sync: Fix command skb lifetime during scan setup

• Linux kernel

Bluetooth: ISO: Reject concurrent BIS listener setup

• Linux kernel

Bluetooth: ISO: Serialize concurrent connect calls

• Linux kernel

Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()

• Linux kernel

Bluetooth: RFCOMM: free the skb when the DLC has no owner

• Linux kernel

Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex

• Linux kernel

Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown

• Linux kernel

drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN

• Linux kernel

drm/i915/gem: Prevent overstepping exec array boundary

• Linux kernel

drm/i915/gt: Unmask interrupts only when ACTIVE is true

• Linux kernel

drm/imagination: Size page table preallocation by device address

• Linux kernel

drm/panthor: validate userspace queue count against initialized firmware slot count

• Linux kernel

drm/vmwgfx: validate pitch coming from userspace

• Linux kernel

drm/xe/i2c: cancel the client work on remove

• Linux kernel

drm/xe: Fix shrinker accounting double-subtraction on nested external pins

• Linux kernel

drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin

• Linux kernel

drm/bridge: th1520-dw-hdmi: Fix remove() callback

• Linux kernel

drm/amdgpu/userq: only accept doorbell BOs as queue doorbell

• Linux kernel

fs: don't silently unmount busy mounts

• Linux kernel

namespace: reset the old parent's ->overmount in mnt_change_mountpoint()

• Linux kernel

statmount: read the parent of an unmounted mount under mount_lock

• Linux kernel

namespace: don't inherit MNT_UMOUNT in clone_mnt()

• Linux kernel

namespace: don't copy an unmounted mount tree

• Linux kernel

namespace: queue a mount only once for mount notifications

• Linux kernel

namespace: check a submount for references right before unmounting it

• Linux kernel

namespace: check a recursive bind mount for mount namespace loops

• Linux kernel

namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE

• Linux kernel

namespace: look at the topmost mount for a mount namespace file

• Linux kernel

namespace: remove the fsnotify marks of a mount namespace in process context

• Linux kernel

namespace: check the mounts before reading their parents in pivot_root()

• Linux kernel

dcache: don't put a mountpoint on a dentry that's being removed

• Linux kernel

unshare: don't drop active namespace references that were never taken

• Linux kernel

namespace: don't let a pseudo dentry become the root of a mount

• Linux kernel

namespace: unhash a dentry before detaching the mounts on it

• Linux kernel

namei: don't reveal overmounted entries in refwalk

• Linux kernel

namespace: refuse an automount below a mount that is in no namespace

• Linux kernel

namespace: never expire a locked mount

• Linux kernel

namespace: handle mount locking for automounts correctly

• Linux kernel

namespace: keep the lock on a mount that a propagated copy is moved beneath

• Linux kernel

xfs: stop exchanging reflink flags when exchanging mappings

• Linux kernel

xfs: fix exchange-range-to-eof file size exchange

• Linux kernel

drm/bridge: Fix unlocked list_del in drm_bridge_add()

• Linux kernel

cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()

• Linux kernel

gpio: exar: initialize the ID before registering its cleanup

• Linux kernel

drm/vc4: Free the BO cache size list on teardown

• Linux kernel

net/sched: em_text: reject unterminated algo before autoload

• Linux kernel

amt: send the relay's General Query directly from the receive path

• Linux kernel

cxgb4/ch_ktls: disable softirqs around tid_list erases

• Linux kernel

bonding: fix the program leak when XDP is replaced

• Linux kernel

ice: Restore Ordered MMIO Writes for Tx Doorbells

• Linux kernel

nvmet: use the local P2P device on metadata allocation failure

• Linux kernel

btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio

• Linux kernel

btrfs: free iov when btrfs_uring_read_extent() fails

• Linux kernel

btrfs: unlock inode and extent in caller when io_uring read extent fails

• Linux kernel