wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()

bpf: Remove tst_run from lwt_seg6local_prog_ops.

btrfs: handle errors from btrfs_dec_ref() properly

btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

PCI: Add missing bridge lock to pci_bus_lock()

Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()

cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT

HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup

HID: amd_sfh: free driver_data after destroying hid device

Squashfs: sanity check symbolic link size

of/irq: Prevent device address out-of-bounds read in interrupt map walk

smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()

misc: fastrpc: Fix double free of 'buf' in error path

binder: fix UAF caused by offsets overwrite

uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

nvmet-tcp: fix kernel crash if commands allocation fails

ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()

btrfs: fix qgroup reserve leaks in cow_file_range

drm/amd/display: Assign linear_pitch_alignment even for VM