mm: call the security_mmap_file() LSM hook in remap_file_pages()

KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock

KEYS: prevent NULL pointer dereference in find_asymmetric_key()

firmware_loader: Block path traversal

btrfs: fix race setting file private on concurrent lseek using same fd

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.

padata: use integer wrap around to prevent deadlock on seq_nr overflow

wifi: mac80211: don't use rate mask for offchannel TX either

nfsd: call cache_put if xdr_reserve_space returns NULL

erofs: handle overlapped pclusters out of crafted images properly

RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled

bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()

drivers/perf: Fix ali_drw_pmu driver interrupt status clearing

crypto: hisilicon/qm - inject error before stopping queue

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

bpf: Zero former ARG_PTR_TO_{LONGINT} args in case of error

x86/tdx: Fix "in-kernel MMIO" check

f2fs: fix to wait dio completion

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func