wifi: ath5k: do not access array OOB

flow_dissector: do not dissect PPPoE PFC frames

nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free

isofs: validate Rock Ridge CE continuation extent against volume size

selinux: allow multiple opens of /sys/fs/selinux/policy

spi: topcliff-pch: fix use-after-free on unbind

net: skbuff: preserve shared-frag marker during coalescing

hfsplus: fix held lock freed on hfsplus_fill_super()

spi: s3c64xx: fix NULL-deref on driver unbind

clk: microchip: mpfs-ccc: fix out of bounds access during output registration

pmdomain: core: Fix detach procedure for virtual devices in genpd

crypto: caam - guard HMAC key hex dumps in hash_digest_key

lib/scatterlist: fix length calculations in extract_kvec_to_sg

net: txgbe: fix RTNL assertion warning when remove module

mtd: docg3: fix use-after-free in docg3_release()

iio: frequency: admv1013: fix NULL pointer dereference on str

lib: test_hmm: evict device pages on file close to avoid use-after-free

Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

io-wq: check that the predecessor is hashed in io_wq_remove_pending()

ibmveth: Disable GSO for packets with small MSS