net: rose: include node references in rose_neigh refcount

net: rose: convert 'use' field to refcount_t

smb: client: fix race with concurrent opens in rename(2)

HID: asus: fix UAF via HID_CLAIMED_INPUT validation

KVM: x86: use array_index_nospec with indices that come from guest

fs/smb: Fix inconsistent refcnt update

efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

ftrace: Fix potential warning in trace_printk_seq during ftrace_dump

sctp: initialize more fields in sctp_v6_from_sk()

bnxt_en: Fix memory corruption when FW resources change during ifdown

HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()

HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

net: macb: fix unregister_netdev call order in macb_remove()

usb: dwc3: Remove WARN_ON for device endpoint command timeouts

btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()

ACPI: processor: perflib: Move problematic pr->performance check

NFS: Fix the setting of capabilities when automounting a new filesystem

xfrm: Duplicate SPI Handling

block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

ARM: tegra: Use I/O memcpy to write to IRAM