RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()

ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

net: libwx: fix VF illegal register access

Bluetooth: btmtk: validate WMT event SKB length before struct access

Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt

mptcp: pm: ADD_ADDR rtx: fix potential data-race

wifi: mt76: mt7921: fix a potential clc buffer length underflow

nvmet-tcp: fix race between ICReq handling and queue teardown

RDMA/rxe: Reject unknown opcodes before ICRC processing

net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo

KVM: x86: check for nEPT/nNPT in slow flush hypercalls

dm-verity-fec: fix reading parity bytes split across blocks (take 3)

btrfs: fix double free in create_space_info() error path

ipmi: Check event message buffer response for bad data

RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()

wifi: mac80211: remove station if connection prep fails

isofs: validate block number from NFS file handle in isofs_export_iget

Bluetooth: virtio_bt: clamp rx length before skb_put

wifi: b43: enforce bounds check on firmware key index in b43_rx()

mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock