bpf: Fix memleak due to fentry attach failure

rxrpc: Make it so that a waiting process can be aborted

wifi: mac80211_hwsim: Fix possible NULL dereference

btrfs: fix use-after-free of new block group that became unused

mm: fix zswap writeback race condition

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

drm/amdgpu: fix calltrace warning in amddrm_buddy_fini

ext4: avoid deadlock in fs reclaim with page writeback

net/mlx5e: Fix cleanup null-ptr deref on encap lock

tracing: Do not let histogram values have some modifiers

drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini

mptcp: use the workqueue to destroy unaccepted sockets

net: usb: lan78xx: Limit packet length to skb->len

iavf: fix hang on reboot with ice

drm/amd/display: Do not set DRR on pipe Commit

scsi: mpi3mr: Bad drive in topology results kernel crash

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

thermal: core: call put_device() only after device_register() fails