iommufd: Protect against overflow of ALIGN() during iova allocation

wifi: rtw88: always wait for both firmware loading attempts

ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros

wifi: mt76: mt7915: fix oops on non-dbdc mt7986

wifi: mt76: mt7996: use hweight16 to get correct tx antenna

wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()

wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param

sock_map: Add a cond_resched() in sock_hash_free()

When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().

ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()

block bfq: fix possible UAF for bfqq->bic with merge chain

block: fix potential invalid pointer dereference in blk_add_partition

drm/amd/display: Check link_res->hpo_dp_link_enc before using it

bpf, lsm: Add check for BPF LSM return value

bpf: Fail verification for sign-extension of packet data/data_end/data_meta

ext4: avoid OOB when system.data xattr changes underneath the filesystem

ext4: check stripe size compatibility on remount as well

nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error