mm/secretmem: fix use-after-free race in fault handler

ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

cifs: client: fix memory leak in smb3_fs_context_parse_param

KVM: arm64: Check the untrusted offset in FF-A memory share

be2net: pass wrb_params in case of OS2BMC

Input: cros_ec_keyb - fix an invalid memory access

Input: imx_sc_key - fix memory corruption on unload

nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()

scsi: sg: Do not sleep in atomic context

mptcp: fix race condition in mptcp_schedule_work()

mptcp: fix a race in mptcp_pm_del_add_timer()

net: openvswitch: remove never-working support for setting nsh fields

s390/ctcm: Fix double-kfree

net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()

devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

net/mlx5: Clean up only new IRQ glue on request_irq() failure

vsock: Ignore signal/timeout on connect() if already established

drm/msm: Fix pgtable prealloc error path

nios2: ensure that memblock.current_limit is set when setting pfn limits

hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()