x86/vmscape: Add conditional IBPB mitigation

net: bridge: fix use-after-free due to MST port state bypass

Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()

iommufd: Don't overflow during division for dirty tracking

virtio-net: fix received length check in big packets

drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices

exfat: fix improper check of dentry.stream.valid_size

smb/server: fix possible memory leak in smb2_read()

smb/server: fix possible refcount leak in smb2_sess_setup()

Bluetooth: MGMT: cancel mesh send timer when hdev removed

Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF

Bluetooth: 6lowpan: reset link-local header on ipv6 recv path

sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto

tipc: Fix use-after-free in tipc_mon_reinit_self().

net: sched: act_connmark: initialize struct tc_ife to fix kernel leak

net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd

NFSD: free copynotify stateid in nfs4_free_ol_stateid()