ip6_gre: Use cached t->net in ip6erspan_changelink().

libceph: Fix slab-out-of-bounds access in auth message processing

xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

block: add pgmap check to biovec_phys_mergeable

RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

Bluetooth: hci_conn: fix potential UAF in create_big_sync

net: stmmac: Prevent NULL deref when RX memory exhausted

usb: ulpi: fix memory leak on ulpi_register() error paths

ipmi:si: Return state to normal if message allocation fails

dm-thin: fix metadata refcount underflow

eventfs: Hold eventfs_mutex and SRCU when remount walks events

can: ucan: fix devres lifetime

net: strparser: fix skb_head leak in strp_abort_strp()

netfilter: reject zero shift in nft_bitwise

net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

net: caif: clear client service pointer on teardown

ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access

wifi: rtw88: check for PCI upstream bridge existence