Bluetooth: MGMT: Fix possible UAFs

nexthop: Forbid FDB status change while nexthop is in a group

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

futex: Prevent use-after-free during requeue-PI

i40e: add validation for ring_len param

i40e: fix idx validation in i40e_validate_queue_map

i40e: fix idx validation in config queues msg

i40e: fix input validation logic for action_meta

i40e: fix validation of VF state in get resources

i40e: add max boundary check for VF filters

fbcon: fix integer overflow in fbcon_do_set_font

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

iommu/amd/pgtbl: Fix possible race while increase page table level

iommu/s390: Make attach succeed when the device was surprise removed

wifi: mac80211: increase scan_ies_len for S1G

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

cgroup: split cgroup_destroy_wq into 3 workqueues

wifi: wilc1000: avoid buffer overflow in WID string configuration

um: virtio_uml: Fix use-after-free after put_device in probe