objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()

ASoC: qcom: audioreach: fix potential null pointer dereference

drm/gma500: Fix null dereference in hdmi teardown

afs: Fix potential null pointer dereference in afs_put_server

spi: cadence-quadspi: Implement refcount to handle unbind during busy

net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

scsi: mvsas: Fix use-after-free bugs in mvs_work_queue

wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()

scsi: target: target_core_configfs: Add length check to avoid buffer overflow

media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

media: tuner: xc5000: Fix use-after-free in xc5000_release

media: rc: fix races with imon_disconnect()

bpf: Check the helper function is valid in get_helper_proto

x86/mce: use is_copy_from_user() to determine copy-from-user context

can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow

can: hi311x: populate ndo_change_mtu() to prevent buffer overflow

can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow

can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow

Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync