PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()

tpm: Change to kvalloc() in eventlog/acpi.c

media: uvcvideo: Remove dangling pointers

powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW

wifi: wcn36xx: fix channel survey memory allocation size

net_sched: sch_sfq: don't allow 1 packet limit

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check

i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition

xfrm: state: fix out-of-bounds read during lookup

usb: xhci: Fix NULL pointer dereference on certain command aborts

media: uvcvideo: Fix double free in error path

pps: Fix a use-after-free

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

memcg: fix soft lockup in the OOM process

btrfs: do proper folio cleanup when cow_file_range() failed

btrfs: do proper folio cleanup when run_delalloc_nocow() failed

udp: Deal with race between UDP socket address change and rehash

rdma/cxgb4: Prevent potential integer overflow on 32bit

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.